{
    "spdxVersion": "SPDX-2.3",
    "dataLicense": "CC0-1.0",
    "SPDXID": "SPDXRef-DOCUMENT",
    "name": "php-8.5.10",
    "documentNamespace": "https://php.net/sbom/windows/php/8.5.10/be8421f7-2910-4695-ad7b-235d538fbf8d",
    "creationInfo": {
        "created": "2026-08-25T21:27:50Z",
        "creators": [
            "Organization: PHP Group",
            "Tool: php-8.5.10"
        ],
        "licenseListVersion": "3.28"
    },
    "documentDescribes": [
        "SPDXRef-PHP"
    ],
    "packages": [
        {
            "name": "php",
            "SPDXID": "SPDXRef-PHP",
            "versionInfo": "8.5.10",
            "downloadLocation": "NOASSERTION",
            "filesAnalyzed": false,
            "licenseConcluded": "PHP-3.01",
            "licenseDeclared": "PHP-3.01",
            "copyrightText": "Copyright (c) 1999 - 2024 The PHP Group. All rights reserved.",
            "supplier": "Organization: PHP Group",
            "originator": "Organization: PHP Group",
            "primaryPackagePurpose": "APPLICATION",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/php@8.5.10"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:php:php:8.5.10:*:*:*:*:*:*:*"
                }
            ],
            "annotations": [
                {
                    "annotationDate": "2026-08-25T21:27:50Z",
                    "annotationType": "OTHER",
                    "annotator": "Tool: php-8.5.10",
                    "comment": "php:dependency-sbom-status=present"
                }
            ]
        },
        {
            "name": "Berkeley uuencode",
            "SPDXID": "SPDXRef-Source-Berkeley-uuencode-snapshot-25636b9321c2-1",
            "versionInfo": "snapshot-25636b9321c2",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/standard/uuencode.c",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-4-Clause-UC",
            "licenseDeclared": "BSD-4-Clause-UC",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/standard/uuencode.c; source digest SHA-256 (file-content-v1): 25636b9321c2859ac28ee4ad7148270ebccaa79143777b623d84985622875597",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "25636b9321c2859ac28ee4ad7148270ebccaa79143777b623d84985622875597"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/berkeley-uuencode"
                }
            ]
        },
        {
            "name": "Boost.Context assembly",
            "SPDXID": "SPDXRef-Source-Boost.Context-assembly-snapshot-6abda7f14758-2",
            "versionInfo": "snapshot-6abda7f14758",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/Zend/asm",
            "filesAnalyzed": false,
            "licenseConcluded": "BSL-1.0",
            "licenseDeclared": "BSL-1.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at Zend/asm; source digest SHA-256 (relative-path-and-file-sha256-v1): 6abda7f14758e771821c255ee9be016c31e181d259bfe394098769013c7b1192",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "6abda7f14758e771821c255ee9be016c31e181d259bfe394098769013c7b1192"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/boost-context-assembly"
                }
            ]
        },
        {
            "name": "crypt_blowfish",
            "SPDXID": "SPDXRef-Source-crypt-blowfish-1.3-3",
            "versionInfo": "1.3",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/standard/crypt_blowfish.c",
            "filesAnalyzed": false,
            "licenseConcluded": "bcrypt-Solar-Designer",
            "licenseDeclared": "bcrypt-Solar-Designer",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/standard/crypt_blowfish.c; source digest SHA-256 (file-content-v1): f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/crypt_blowfish@1.3"
                }
            ]
        },
        {
            "name": "DynASM",
            "SPDXID": "SPDXRef-Source-DynASM-1.5.0-4",
            "versionInfo": "1.5.0",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/opcache/jit/ir/dynasm",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/opcache/jit/ir/dynasm; source digest SHA-256 (relative-path-and-file-sha256-v1): d2d56ba8be243d8330b96f0aaf416dd4f8e153667a9ee07fcfe5cf7cf8e2fa22",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "d2d56ba8be243d8330b96f0aaf416dd4f8e153667a9ee07fcfe5cf7cf8e2fa22"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/dynasm@1.5.0"
                }
            ]
        },
        {
            "name": "FreeSec libcrypt",
            "SPDXID": "SPDXRef-Source-FreeSec-libcrypt-snapshot-6b1d1d57b0af-5",
            "versionInfo": "snapshot-6b1d1d57b0af",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/standard/crypt_freesec.c",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/standard/crypt_freesec.c; source digest SHA-256 (file-content-v1): 6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/freesec-libcrypt"
                }
            ]
        },
        {
            "name": "libarchive tar format_octal",
            "SPDXID": "SPDXRef-Source-libarchive-tar-format-octal-snapshot-36341177800f-6",
            "versionInfo": "snapshot-36341177800f",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/phar/tar.c",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-2-Clause",
            "licenseDeclared": "BSD-2-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/phar/tar.c; source digest SHA-256 (file-content-v1): 36341177800fc8f5646c62cc2a4b3dacd24b58b277cdfef47ce902e014288b17",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "36341177800fc8f5646c62cc2a4b3dacd24b58b277cdfef47ce902e014288b17"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libarchive-format-octal"
                }
            ]
        },
        {
            "name": "libavifinfo",
            "SPDXID": "SPDXRef-Source-libavifinfo-2b924defa4c2cd227540efe164067a8cc913eeba-7",
            "versionInfo": "2b924defa4c2cd227540efe164067a8cc913eeba",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/standard/libavifinfo",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-2-Clause",
            "licenseDeclared": "BSD-2-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/standard/libavifinfo; source digest SHA-256 (relative-path-and-file-sha256-v1): eebfce3dfe05d5173f6c95afcfb780eb4eda76cbff22d7149dffc6fd4590a8a1",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "eebfce3dfe05d5173f6c95afcfb780eb4eda76cbff22d7149dffc6fd4590a8a1"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libavifinfo@2b924defa4c2cd227540efe164067a8cc913eeba"
                }
            ]
        },
        {
            "name": "libbcmath",
            "SPDXID": "SPDXRef-Source-libbcmath-0.2-8",
            "versionInfo": "0.2",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/bcmath/libbcmath",
            "filesAnalyzed": false,
            "licenseConcluded": "LGPL-2.1-only",
            "licenseDeclared": "LGPL-2.1-only",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/bcmath/libbcmath; source digest SHA-256 (relative-path-and-file-sha256-v1): 1dc7ff5094242a377246b4462aeb0efd5142dc5fba9c4ab3bdfdc263f009973e",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "1dc7ff5094242a377246b4462aeb0efd5142dc5fba9c4ab3bdfdc263f009973e"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libbcmath@0.2"
                }
            ]
        },
        {
            "name": "libgd",
            "SPDXID": "SPDXRef-Source-libgd-2.0.35-9",
            "versionInfo": "2.0.35",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/gd/libgd",
            "filesAnalyzed": false,
            "licenseConcluded": "GD",
            "licenseDeclared": "GD",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/gd/libgd; source digest SHA-256 (relative-path-and-file-sha256-v1): d4d2379d9a61d03fd9458bc13ccb2ff67096c364a780d1dbf342585f0ddb411f",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "d4d2379d9a61d03fd9458bc13ccb2ff67096c364a780d1dbf342585f0ddb411f"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libgd@2.0.35"
                }
            ]
        },
        {
            "name": "libmagic",
            "SPDXID": "SPDXRef-Source-libmagic-5.46-10",
            "versionInfo": "5.46",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/fileinfo/libmagic",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-2-Clause",
            "licenseDeclared": "BSD-2-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/fileinfo/libmagic; source digest SHA-256 (relative-path-and-file-sha256-v1): 7924d405b2f9ef3c1ff2b28a4e4d40042de73e668ceae479086d37330891d0d6",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "7924d405b2f9ef3c1ff2b28a4e4d40042de73e668ceae479086d37330891d0d6"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libmagic@5.46"
                }
            ]
        },
        {
            "name": "libmbfl",
            "SPDXID": "SPDXRef-Source-libmbfl-1.3.2-11",
            "versionInfo": "1.3.2",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/mbstring/libmbfl",
            "filesAnalyzed": false,
            "licenseConcluded": "LGPL-2.1-only",
            "licenseDeclared": "LGPL-2.1-only",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/mbstring/libmbfl; source digest SHA-256 (relative-path-and-file-sha256-v1): ce20ebaad689bfc0dabfb1ad9dec9bfbea30b299430465566db997084a939a2a",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "ce20ebaad689bfc0dabfb1ad9dec9bfbea30b299430465566db997084a939a2a"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libmbfl@1.3.2"
                }
            ]
        },
        {
            "name": "libzip zip_dirent",
            "SPDXID": "SPDXRef-Source-libzip-zip-dirent-snapshot-79aa92b5cca9-12",
            "versionInfo": "snapshot-79aa92b5cca9",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/phar/zip.c",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/phar/zip.c; source digest SHA-256 (file-content-v1): 79aa92b5cca9f1bf4eedad9f72925b580707449a6d4e422db0c87e020f9222dc",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "79aa92b5cca9f1bf4eedad9f72925b580707449a6d4e422db0c87e020f9222dc"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libzip-zip-dirent"
                }
            ]
        },
        {
            "name": "MTRand",
            "SPDXID": "SPDXRef-Source-MTRand-1.0-13",
            "versionInfo": "1.0",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/random/engine_mt19937.c",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/random/engine_mt19937.c; source digest SHA-256 (file-content-v1): e789018f1e172ec356910fb66d9d50f13b780e05920e12d510395beaf96196ac",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "e789018f1e172ec356910fb66d9d50f13b780e05920e12d510395beaf96196ac"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/mtrand@1.0"
                }
            ]
        },
        {
            "name": "OpenLDAP ucgendat",
            "SPDXID": "SPDXRef-Source-OpenLDAP-ucgendat-snapshot-572651bf88b0-14",
            "versionInfo": "snapshot-572651bf88b0",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/mbstring/ucgendat/ucgendat.php",
            "filesAnalyzed": false,
            "licenseConcluded": "OLDAP-2.8 AND MIT",
            "licenseDeclared": "OLDAP-2.8 AND MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/mbstring/ucgendat/ucgendat.php; source digest SHA-256 (file-content-v1): 572651bf88b0d2a10f16ff41191ecb385a37e6102a12117597bc7523e0bad968",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "572651bf88b0d2a10f16ff41191ecb385a37e6102a12117597bc7523e0bad968"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/openldap-ucgendat"
                }
            ]
        },
        {
            "name": "pcre2lib",
            "SPDXID": "SPDXRef-Source-pcre2lib-10.44-15",
            "versionInfo": "10.44",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/pcre/pcre2lib",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause WITH PCRE2-exception",
            "licenseDeclared": "BSD-3-Clause WITH PCRE2-exception",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/pcre/pcre2lib; source digest SHA-256 (relative-path-and-file-sha256-v1): 707a215120b9b27c3f80c75557b88de1890ea9e16212324fa87ddcede3e53d95",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "707a215120b9b27c3f80c75557b88de1890ea9e16212324fa87ddcede3e53d95"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/pcre2@10.44"
                }
            ]
        },
        {
            "name": "snprintf",
            "SPDXID": "SPDXRef-Source-snprintf-snapshot-42618fe2e789-16",
            "versionInfo": "snapshot-42618fe2e789",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/main/snprintf.c",
            "filesAnalyzed": false,
            "licenseConcluded": "ISC AND Apache-1.0",
            "licenseDeclared": "ISC AND Apache-1.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at main/snprintf.c; source digest SHA-256 (file-content-v1): 42618fe2e789fed999fc4d6b832991db42d45314240fe6d7da72f66867623ff6",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "42618fe2e789fed999fc4d6b832991db42d45314240fe6d7da72f66867623ff6"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/snprintf"
                }
            ]
        },
        {
            "name": "strlcat",
            "SPDXID": "SPDXRef-Source-strlcat-snapshot-d2244e6a54fe-17",
            "versionInfo": "snapshot-d2244e6a54fe",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/main/strlcat.c",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at main/strlcat.c; source digest SHA-256 (file-content-v1): d2244e6a54fead4265249866946ac7fb5050676fefe683110dbb965ea9a6dce8",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "d2244e6a54fead4265249866946ac7fb5050676fefe683110dbb965ea9a6dce8"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/strlcat"
                }
            ]
        },
        {
            "name": "strlcpy",
            "SPDXID": "SPDXRef-Source-strlcpy-snapshot-144d697952d1-18",
            "versionInfo": "snapshot-144d697952d1",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/main/strlcpy.c",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at main/strlcpy.c; source digest SHA-256 (file-content-v1): 144d697952d109c4876660691033dcbe12b9c6124732199c56f31a02422884a6",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "144d697952d109c4876660691033dcbe12b9c6124732199c56f31a02422884a6"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/strlcpy"
                }
            ]
        },
        {
            "name": "strnatcmp",
            "SPDXID": "SPDXRef-Source-strnatcmp-snapshot-e14f21965b39-19",
            "versionInfo": "snapshot-e14f21965b39",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/standard/strnatcmp.c",
            "filesAnalyzed": false,
            "licenseConcluded": "Zlib",
            "licenseDeclared": "Zlib",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/standard/strnatcmp.c; source digest SHA-256 (file-content-v1): e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/strnatcmp"
                }
            ]
        },
        {
            "name": "Tcl scanf implementation",
            "SPDXID": "SPDXRef-Source-Tcl-scanf-implementation-8.3.0-20",
            "versionInfo": "8.3.0",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/standard/scanf.c",
            "filesAnalyzed": false,
            "licenseConcluded": "TCL",
            "licenseDeclared": "TCL",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/standard/scanf.c; source digest SHA-256 (file-content-v1): b8fc92fa954fdb70a31307312c5c50335d37fa2c35ff30560e7590010ffe36e1",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "b8fc92fa954fdb70a31307312c5c50335d37fa2c35ff30560e7590010ffe36e1"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/tcl-scanf@8.3.0"
                }
            ]
        },
        {
            "name": "timelib",
            "SPDXID": "SPDXRef-Source-timelib-2022.17-21",
            "versionInfo": "2022.17",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/date/lib",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/date/lib; source digest SHA-256 (relative-path-and-file-sha256-v1): 2210ee5ba51e09e82e37c7703f661704c412ca918612c9fcb44650dc4e2a873e",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "2210ee5ba51e09e82e37c7703f661704c412ca918612c9fcb44650dc4e2a873e"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/timelib@2022.17"
                }
            ]
        },
        {
            "name": "XKCP SHA-3",
            "SPDXID": "SPDXRef-Source-XKCP-SHA-3-snapshot-aba3170bb6e1-22",
            "versionInfo": "snapshot-aba3170bb6e1",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/hash/sha3",
            "filesAnalyzed": false,
            "licenseConcluded": "CC0-1.0 AND Brian-Gladman-3-Clause",
            "licenseDeclared": "CC0-1.0 AND Brian-Gladman-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/hash/sha3; source digest SHA-256 (relative-path-and-file-sha256-v1): aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/xkcp-sha3"
                }
            ]
        },
        {
            "name": "xxHash",
            "SPDXID": "SPDXRef-Source-xxHash-0.8.1-23",
            "versionInfo": "0.8.1",
            "downloadLocation": "https://github.com/php/php-src/tree/php-8.5.10/ext/hash/xxhash",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-2-Clause",
            "licenseDeclared": "BSD-2-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: PHP Group",
            "originator": "NOASSERTION",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Bundled in php-8.5.10 source tree at ext/hash/xxhash; source digest SHA-256 (relative-path-and-file-sha256-v1): 758cc817eb2636dde0c0213b8df1f7e1ba60a4adb3f07b4a62c89223d3f5207d",
            "checksums": [
                {
                    "algorithm": "SHA256",
                    "checksumValue": "758cc817eb2636dde0c0213b8df1f7e1ba60a4adb3f07b4a62c89223d3f5207d"
                }
            ],
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/xxhash@0.8.1"
                }
            ]
        },
        {
            "name": "ICU",
            "SPDXID": "SPDXRef-Dependency-ICU-77.1-1-24",
            "versionInfo": "77.1-1",
            "packageFileName": "ICU-77.1-1-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/ICU-77.1-1-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "Unicode-DFS-2016",
            "licenseDeclared": "Unicode-DFS-2016",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: unicode-org",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/icu@77.1"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/unicode-org/icu"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/unicode-org/icu/tree/release-77-1"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/icu4c.git@11bca20cc331c2ad3d38e240e5921ebfad8fe523"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:24:20Z",
                    "comment": "source-origin=winlibs-fork; upstream=unicode-org/icu@release-77-1; source=winlibs/icu4c@icu4c-77.1-1; source-commit=11bca20cc331c2ad3d38e240e5921ebfad8fe523"
                }
            ]
        },
        {
            "name": "apache",
            "SPDXID": "SPDXRef-Dependency-apache-2.4.68-25",
            "versionInfo": "2.4.68",
            "packageFileName": "apache-2.4.68-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/apache-2.4.68-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "Apache-2.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: apache",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/apache-httpd@2.4.68"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:apache:http_server:2.4.68:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/apache/httpd"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/apache/httpd/tree/2.4.68"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/apache/httpd.git@736bb657405eb73fd68a64772c3a908807bdb887"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-18T08:34:11Z",
                    "comment": "source-origin=upstream; upstream=apache/httpd@2.4.68; source=apache/httpd@2.4.68; source-commit=736bb657405eb73fd68a64772c3a908807bdb887; not-affected-cves=CVE-1999-0289,CVE-1999-0678,CVE-2025-3891"
                }
            ]
        },
        {
            "name": "apr-iconv",
            "SPDXID": "SPDXRef-Dependency-apr-iconv-1.2.2-26",
            "versionInfo": "1.2.2",
            "downloadLocation": "https://github.com/apache/apr-iconv/tree/1.2.2",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "Apache-2.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: apache",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Embedded from apr-iconv-source/apr-iconv-1.2.2.",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/apr-iconv@1.2.2"
                }
            ]
        },
        {
            "name": "apr-util",
            "SPDXID": "SPDXRef-Dependency-apr-util-1.6.3-27",
            "versionInfo": "1.6.3",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/apr-util",
            "homepage": "https://apr.apache.org/",
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "description": "Apache Portable Runtime (APR) project  mission is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementation",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/apr-util"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "apr-util:x64-windows",
            "SPDXID": "SPDXRef-Dependency-apr-util-x64-windows-c0221bb1ebe3af251a9b9a69917701cf75f2bbfafabb4c88ee331dba0aad8dcd-28",
            "versionInfo": "c0221bb1ebe3af251a9b9a69917701cf75f2bbfafabb4c88ee331dba0aad8dcd",
            "downloadLocation": "NONE",
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-apr-util-1.6.3.tar.bz2-1.6.3-29",
            "name": "apr-util-1.6.3.tar.bz2",
            "packageFileName": "apr-util-1.6.3.tar.bz2",
            "downloadLocation": "https://archive.apache.org/dist/apr/apr-util-1.6.3.tar.bz2",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "8050a481eeda7532ef3751dbd8a5aa6c48354d52904a856ef9709484f4b0cc2e022661c49ddf55ec58253db22708ee0607dfa7705d9270e8fee117ae4f06a0fe"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "1.6.3",
            "supplier": "Organization: Apache Software Foundation",
            "licenseConcluded": "Apache-2.0",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "apr",
            "SPDXID": "SPDXRef-Dependency-apr-1.7.6-1-30",
            "versionInfo": "1.7.6#1",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/apr",
            "homepage": "https://apr.apache.org/",
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "description": "The Apache Portable Runtime (APR) is a C library that forms a system portability layer that covers many operating systems.",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/apr"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "apr:x64-windows",
            "SPDXID": "SPDXRef-Dependency-apr-x64-windows-03919ccf3f69b15eba8f04368099f5d3dc5c23ed3526015ec9137984d41c4fad-31",
            "versionInfo": "03919ccf3f69b15eba8f04368099f5d3dc5c23ed3526015ec9137984d41c4fad",
            "downloadLocation": "NONE",
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-apr-1.7.6.tar.bz2-1.7.6-32",
            "name": "apr-1.7.6.tar.bz2",
            "packageFileName": "apr-1.7.6.tar.bz2",
            "downloadLocation": "https://downloads.apache.org/apr/apr-1.7.6.tar.bz2",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "629b60680d1244641828019db903a1b199e8a19c8f27a5132b93faacb381ce561f88463345ab019258f1f1e8cfdf8aa986ac815153a8e7e04a22b3932f9fedd2"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "1.7.6",
            "supplier": "Organization: Apache Software Foundation",
            "licenseConcluded": "Apache-2.0",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "brotli",
            "SPDXID": "SPDXRef-Dependency-brotli-1.2.0-33",
            "versionInfo": "1.2.0",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/brotli",
            "homepage": "https://github.com/google/brotli",
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "description": "a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling.",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/brotli"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "brotli:x64-windows",
            "SPDXID": "SPDXRef-Dependency-brotli-x64-windows-45a3ef2859dd01b67fd278f7750b1e843fcc4554fd5350940963f48da31a7426-34",
            "versionInfo": "45a3ef2859dd01b67fd278f7750b1e843fcc4554fd5350940963f48da31a7426",
            "downloadLocation": "NONE",
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-google-brotli-1.2.0-35",
            "name": "google/brotli",
            "downloadLocation": "git+https://github.com/google/brotli@v1.2.0",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "f94542afd2ecd96cc41fd21a805a3da314281ae558c10650f3e6d9ca732b8425bba8fde312823f0a564c7de3993bdaab5b43378edab65ebb798cefb6fd702256"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "1.2.0",
            "supplier": "Organization: google",
            "licenseConcluded": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "curl",
            "SPDXID": "SPDXRef-Dependency-curl-8.21.0-1-36",
            "versionInfo": "8.21.0#1",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/curl",
            "homepage": "https://curl.se/",
            "licenseConcluded": "BSD-3-Clause AND ISC AND curl",
            "licenseDeclared": "NOASSERTION",
            "description": "A library for transferring data with URLs",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/curl"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "curl:x64-windows",
            "SPDXID": "SPDXRef-Dependency-curl-x64-windows-ea772160a9dd49cf8c0365727979d54a2593b7e9b057572af2174857bd60016e-37",
            "versionInfo": "ea772160a9dd49cf8c0365727979d54a2593b7e9b057572af2174857bd60016e",
            "downloadLocation": "NONE",
            "licenseConcluded": "BSD-3-Clause AND ISC AND curl",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-curl-curl-8.21.0-38",
            "name": "curl/curl",
            "downloadLocation": "git+https://github.com/curl/curl@${curl_version}",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "0ab6c99c3d5b86fb65c526db517c3159b11db2f8d82552d635c4887059c0602288603c93b754ce0ec543ea2f275122ccec2c8dcd866c2611b5b949c728ee72df"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "8.21.0",
            "supplier": "Organization: curl",
            "licenseConcluded": "BSD-3-Clause AND ISC AND curl",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "expat",
            "SPDXID": "SPDXRef-Dependency-expat-2.8.2-39",
            "versionInfo": "2.8.2",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/expat",
            "homepage": "https://github.com/libexpat/libexpat",
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "description": "XML parser library written in C",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/expat"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "expat:x64-windows",
            "SPDXID": "SPDXRef-Dependency-expat-x64-windows-c1722303603d771cc7dd274c0d811b2d1f3caf311b6117a74e9ef24bd7c7a1e6-40",
            "versionInfo": "c1722303603d771cc7dd274c0d811b2d1f3caf311b6117a74e9ef24bd7c7a1e6",
            "downloadLocation": "NONE",
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-libexpat-libexpat-2.8.2-41",
            "name": "libexpat/libexpat",
            "downloadLocation": "git+https://github.com/libexpat/libexpat@${REF}",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "e60e6d6ae9d0115f41186f06f3854008054863f0b29a58d44142f5b30057a494337145d820b5e18270b8ca3e779e318a757fcc6bf64d6d204e5498df5eeb2195"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "2.8.2",
            "supplier": "Organization: libexpat",
            "licenseConcluded": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "jansson",
            "SPDXID": "SPDXRef-Dependency-jansson-2.15.1-42",
            "versionInfo": "2.15.1",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/jansson",
            "homepage": "https://github.com/akheron/jansson",
            "licenseConcluded": "MIT AND dtoa",
            "licenseDeclared": "NOASSERTION",
            "description": "Jansson is a C library for encoding, decoding and manipulating JSON data",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/jansson"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "jansson:x64-windows",
            "SPDXID": "SPDXRef-Dependency-jansson-x64-windows-678d7ad3250826f28d4b77b4c2ef87cb6b02d5dfb8d29c14eeac3f5cf5a1ced4-43",
            "versionInfo": "678d7ad3250826f28d4b77b4c2ef87cb6b02d5dfb8d29c14eeac3f5cf5a1ced4",
            "downloadLocation": "NONE",
            "licenseConcluded": "MIT AND dtoa",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-akheron-jansson-2.15.1-44",
            "name": "akheron/jansson",
            "downloadLocation": "git+https://github.com/akheron/jansson@v2.15.1",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "233f154e1f55f395bffa7c946e56995913248138541fa093abc5317a23096d1f58b8e594fcff94918d0db2f15a96652554bb429949661534b65d0569c29b52d9"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "2.15.1",
            "supplier": "Organization: akheron",
            "licenseConcluded": "MIT AND dtoa",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "lua",
            "SPDXID": "SPDXRef-Dependency-lua-5.5.0-1-45",
            "versionInfo": "5.5.0#1",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/lua",
            "homepage": "https://www.lua.org",
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "description": "A powerful, fast, lightweight, embeddable scripting language",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/lua"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "lua:x64-windows",
            "SPDXID": "SPDXRef-Dependency-lua-x64-windows-e8f14584d48e1c2107547c9f22b9a9eccf73691b4aa033d797703ff440500676-46",
            "versionInfo": "e8f14584d48e1c2107547c9f22b9a9eccf73691b4aa033d797703ff440500676",
            "downloadLocation": "NONE",
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-lua-5.5.0.tar.gz-5.5.0-47",
            "name": "lua-5.5.0.tar.gz",
            "packageFileName": "lua-5.5.0.tar.gz",
            "downloadLocation": "https://www.lua.org/ftp/lua-5.5.0.tar.gz",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "3253d2cdc929da6438095a30d66ef16a1abdbb0ada8fee238705b3b38492f14be9553640fdca6b25661e01155ba5582032e0a2ef064e4c283e85efc0a128cabe"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "5.5.0",
            "supplier": "Organization: Lua.org",
            "licenseConcluded": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "nghttp2",
            "SPDXID": "SPDXRef-Dependency-nghttp2-1.69.0-48",
            "versionInfo": "1.69.0",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/nghttp2",
            "homepage": "https://github.com/nghttp2/nghttp2",
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "description": "Implementation of the Hypertext Transfer Protocol version 2 in C",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/nghttp2"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "nghttp2:x64-windows",
            "SPDXID": "SPDXRef-Dependency-nghttp2-x64-windows-1ea9da733d3d49024dff92b30043ee27dba59373816942b3d8c986b8a5edb676-49",
            "versionInfo": "1ea9da733d3d49024dff92b30043ee27dba59373816942b3d8c986b8a5edb676",
            "downloadLocation": "NONE",
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-nghttp2-nghttp2-1.69.0-50",
            "name": "nghttp2/nghttp2",
            "downloadLocation": "git+https://github.com/nghttp2/nghttp2@v1.69.0",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "1029fb86935a88fc518cc2d976dff5253277f97e01f32b1f73c5df96dcf7fe0280a83a9e9d676c3d96caa542300dc7cfa61f2a40b1b11d2c2b527e870a974b53"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "1.69.0",
            "supplier": "Organization: nghttp2",
            "licenseConcluded": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "openssl",
            "SPDXID": "SPDXRef-Dependency-openssl-3.6.3-51",
            "versionInfo": "3.6.3",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/openssl",
            "homepage": "https://www.openssl.org",
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "description": "OpenSSL is an open source project that provides a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It is also a general-purpose cryptography library.",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/openssl"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "openssl:x64-windows",
            "SPDXID": "SPDXRef-Dependency-openssl-x64-windows-8ebeacc935df08d9d1c210b16ef5af918196229f49850b57a60b800802600677-52",
            "versionInfo": "8ebeacc935df08d9d1c210b16ef5af918196229f49850b57a60b800802600677",
            "downloadLocation": "NONE",
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-openssl-openssl-3.6.3-53",
            "name": "openssl/openssl",
            "downloadLocation": "git+https://github.com/openssl/openssl@openssl-3.6.3",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "a89c08101fa1d7e3c09b14f4a90d450bcf336a4f6a3e6e4ea990e4deddcd9ce250472f9114438fd134ff4b47fe93dd47232308567088b2b1c0b2eb50e3b56bdf"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "3.6.3",
            "supplier": "Organization: openssl",
            "licenseConcluded": "Apache-2.0",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "pcre2",
            "SPDXID": "SPDXRef-Dependency-pcre2-10.47-1-54",
            "versionInfo": "10.47#1",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/pcre2",
            "homepage": "https://github.com/PCRE2Project/pcre2",
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "NOASSERTION",
            "description": "Regular Expression pattern matching using the same syntax and semantics as Perl 5.",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/pcre2"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "pcre2:x64-windows",
            "SPDXID": "SPDXRef-Dependency-pcre2-x64-windows-1b0a3280c093bfad0beafbc16e9be01ee86d1064a85163ebb3afc7b0a5339ddc-55",
            "versionInfo": "1b0a3280c093bfad0beafbc16e9be01ee86d1064a85163ebb3afc7b0a5339ddc",
            "downloadLocation": "NONE",
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-PCRE2Project-pcre2-10.47-56",
            "name": "PCRE2Project/pcre2",
            "downloadLocation": "git+https://github.com/PCRE2Project/pcre2@pcre2-10.47",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "4deef8ce95711e65fe07624e6b2aace794594adb15e8363a0279a7b947bf5c75a5858fbdc5251d0a28a7ca97ae8bba561aa5f85805d5c07d417d3e7b3b3486a4"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "10.47",
            "supplier": "Organization: PCRE2Project",
            "licenseConcluded": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-zherczeg-sljit-45f910b78c6605ebf5b53d3ec7cb00f2312fe417-57",
            "name": "zherczeg/sljit",
            "downloadLocation": "git+https://github.com/zherczeg/sljit@45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "c05c83cc762f430c01e2aaf876aaac41a70b67ed8b91bc81102ad527c8921c5e75b41bab35bb8237dd5f53fecd7b8f31206865efffce2ea0a1aa9c87079fc643"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "supplier": "Person: Zoltan Herczeg",
            "licenseConcluded": "BSD-2-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "zlib",
            "SPDXID": "SPDXRef-Dependency-zlib-1.3.2-1-58",
            "versionInfo": "1.3.2#1",
            "downloadLocation": "git+https://github.com/Microsoft/vcpkg#ports/zlib",
            "homepage": "https://www.zlib.net/",
            "licenseConcluded": "Zlib",
            "licenseDeclared": "NOASSERTION",
            "description": "A compression library",
            "comment": "This is the port (recipe) consumed by vcpkg.",
            "primaryPackagePurpose": "SOURCE",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:github/microsoft/vcpkg#ports/zlib"
                }
            ],
            "supplier": "Organization: Microsoft",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "zlib:x64-windows",
            "SPDXID": "SPDXRef-Dependency-zlib-x64-windows-5ae23b0077d1eaea33185c69c114d098231e93cc7d2c77a8123d625ddd85c44b-59",
            "versionInfo": "5ae23b0077d1eaea33185c69c114d098231e93cc7d2c77a8123d625ddd85c44b",
            "downloadLocation": "NONE",
            "licenseConcluded": "Zlib",
            "licenseDeclared": "NOASSERTION",
            "comment": "This is a binary package built by vcpkg.",
            "primaryPackagePurpose": "LIBRARY",
            "supplier": "Organization: Winlibs",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "SPDXID": "SPDXRef-Dependency-madler-zlib-1.3.2-60",
            "name": "madler/zlib",
            "downloadLocation": "git+https://github.com/madler/zlib@v1.3.2",
            "licenseDeclared": "NOASSERTION",
            "checksums": [
                {
                    "algorithm": "SHA512",
                    "checksumValue": "16fea4df307a68cf0035858abe2fd550250618a97590e202037acd18a666f57afc10f8836cbbd472d54a0e76539d0e558cb26f059d53de52ff90634bbf4f47d4"
                }
            ],
            "primaryPackagePurpose": "SOURCE",
            "versionInfo": "1.3.2",
            "supplier": "Organization: madler",
            "licenseConcluded": "Zlib",
            "copyrightText": "See accompanying license and notice files.",
            "filesAnalyzed": false
        },
        {
            "name": "brotli",
            "SPDXID": "SPDXRef-Dependency-brotli-1.2.0-61",
            "versionInfo": "1.2.0",
            "packageFileName": "brotli-1.2.0-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/brotli-1.2.0-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: google",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/brotli@1.2.0"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:google:brotli:1.2.0:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/google/brotli"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/google/brotli/tree/v1.2.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/google/brotli.git@028fb5a23661f123017c060daa546b55cf4bde29"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:18:39Z",
                    "comment": "source-origin=upstream; upstream=google/brotli@v1.2.0; source=google/brotli@v1.2.0; source-commit=028fb5a23661f123017c060daa546b55cf4bde29"
                }
            ]
        },
        {
            "name": "fbclient",
            "SPDXID": "SPDXRef-Dependency-fbclient-4.0.7-62",
            "versionInfo": "4.0.7",
            "packageFileName": "fbclient-4.0.7-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/fbclient-4.0.7-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "Interbase-1.0 AND LicenseRef-fbclient-IDPL-1.0",
            "licenseDeclared": "Interbase-1.0 AND LicenseRef-fbclient-IDPL-1.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: FirebirdSQL",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/firebird@4.0.7"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/FirebirdSQL/firebird/tree/v4.0.7"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:19:09Z",
                    "comment": "source-origin=upstream; upstream=FirebirdSQL/firebird@v4.0.7; source=FirebirdSQL/firebird@v4.0.7"
                }
            ]
        },
        {
            "name": "freetype",
            "SPDXID": "SPDXRef-Dependency-freetype-2.14.3-63",
            "versionInfo": "2.14.3",
            "packageFileName": "freetype-2.14.3-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/freetype-2.14.3-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "FTL OR GPL-2.0-or-later",
            "licenseDeclared": "FTL OR GPL-2.0-or-later",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: freetype",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/freetype@2.14.3"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:freetype:freetype:2.14.3:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/freetype/freetype"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/freetype/freetype/tree/VER-2-14-3"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/freetype.git@3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:19:25Z",
                    "comment": "source-origin=winlibs-fork; upstream=freetype/freetype@VER-2-14-3; source=winlibs/freetype@freetype-2.14.3; source-commit=3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                }
            ]
        },
        {
            "name": "glib",
            "SPDXID": "SPDXRef-Dependency-glib-2.88.3-64",
            "versionInfo": "2.88.3",
            "packageFileName": "glib-2.88.3-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/glib-2.88.3-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "LGPL-2.1-or-later",
            "licenseDeclared": "LGPL-2.1-or-later",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: GNOME",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/glib@2.88.3"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:gnome:glib:2.88.3:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/GNOME/glib"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/GNOME/glib/tree/2.88.3"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/glib.git@ca9d6adf53e11099045a6d51116dd0b678faa1f3"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-17T14:01:39Z",
                    "comment": "source-origin=winlibs-fork; upstream=GNOME/glib@2.88.3; source=winlibs/glib@glib-2.88.3; source-commit=ca9d6adf53e11099045a6d51116dd0b678faa1f3"
                }
            ]
        },
        {
            "name": "libffi",
            "SPDXID": "SPDXRef-Dependency-libffi-3.8.0-65",
            "versionInfo": "3.8.0",
            "packageFileName": "libffi-3.8.0-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libffi-3.8.0-vs17-x64.zip",
            "licenseConcluded": "MIT",
            "licenseDeclared": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: libffi",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libffi@3.8.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/libffi/libffi"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/libffi/libffi/tree/v3.8.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libffi.git@30ae078e9dbf2cb36de5db54b9740e89d8ff52e1"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-17T13:56:43Z",
                    "comment": "source-origin=winlibs-fork; upstream=libffi/libffi@v3.8.0; source=winlibs/libffi@libffi-3.8.0; source-commit=30ae078e9dbf2cb36de5db54b9740e89d8ff52e1"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "libintl",
            "SPDXID": "SPDXRef-Dependency-libintl-1.0-66",
            "versionInfo": "1.0",
            "packageFileName": "libintl-1.0-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libintl-1.0-vs17-x64.zip",
            "licenseConcluded": "LGPL-2.1-or-later",
            "licenseDeclared": "LGPL-2.1-or-later",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: git.savannah.gnu.org",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/gettext@1.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/gettext.git@cd6fcaeffc493305f9c0081310efa0e063060da6"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:27:45Z",
                    "comment": "source-origin=winlibs-fork; upstream=https://git.savannah.gnu.org/git/gettext.git@v1.0; source=winlibs/gettext@libintl-1.0; source-commit=cd6fcaeffc493305f9c0081310efa0e063060da6"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "zlib",
            "SPDXID": "SPDXRef-Dependency-zlib-1.3.2-67",
            "versionInfo": "1.3.2",
            "packageFileName": "zlib-1.3.2-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/zlib-1.3.2-vs17-x64.zip",
            "licenseConcluded": "Zlib",
            "licenseDeclared": "Zlib",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: madler",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/zlib@1.3.2"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/madler/zlib"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/madler/zlib/tree/v1.3.2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/zlib.git@0089522e62e6b5d4950e62bd20f0cb06a9288413"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:20:34Z",
                    "comment": "source-origin=winlibs-fork; upstream=madler/zlib@v1.3.2; source=winlibs/zlib@zlib-1.3.2; source-commit=0089522e62e6b5d4950e62bd20f0cb06a9288413"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "libargon2",
            "SPDXID": "SPDXRef-Dependency-libargon2-20190702-68",
            "versionInfo": "20190702",
            "packageFileName": "libargon2-20190702-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libargon2-20190702-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "CC0-1.0",
            "licenseDeclared": "CC0-1.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: P-H-C",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libargon2@20190702"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/P-H-C/phc-winner-argon2/tree/20190702"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/argon2.git@fb53ef37be212380d51877b70f514f3bf2c1ee40"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:20:00Z",
                    "comment": "source-origin=winlibs-fork; upstream=P-H-C/phc-winner-argon2@20190702; source=winlibs/argon2@libargon2-20190702; source-commit=fb53ef37be212380d51877b70f514f3bf2c1ee40"
                }
            ]
        },
        {
            "name": "libavif",
            "SPDXID": "SPDXRef-Dependency-libavif-1.4.2-69",
            "versionInfo": "1.4.2",
            "packageFileName": "libavif-1.4.2-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libavif-1.4.2-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-2-Clause",
            "licenseDeclared": "BSD-2-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: AOMediaCodec",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libavif@1.4.2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/AOMediaCodec/libavif/tree/v1.4.2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libavif.git@14976153789c7ebf2ca24b22215a964bbc5be213"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-31T23:23:55Z",
                    "comment": "source-origin=winlibs-fork; upstream=AOMediaCodec/libavif@v1.4.2; source=winlibs/libavif@libavif-1.4.2; source-commit=14976153789c7ebf2ca24b22215a964bbc5be213"
                }
            ]
        },
        {
            "name": "aom",
            "SPDXID": "SPDXRef-Dependency-aom-3.14.1-70",
            "versionInfo": "3.14.1",
            "downloadLocation": "https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.1",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: aomedia.googlesource.com",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Embedded from libavif/ext/aom.",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/aom@3.14.1"
                }
            ]
        },
        {
            "name": "libbzip2",
            "SPDXID": "SPDXRef-Dependency-libbzip2-1.0.8-1-71",
            "versionInfo": "1.0.8-1",
            "packageFileName": "libbzip2-1.0.8-1-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libbzip2-1.0.8-1-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "bzip2-1.0.6",
            "licenseDeclared": "bzip2-1.0.6",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: libarchive",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/bzip2@1.0.8"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/libarchive/bzip2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/libarchive/bzip2/tree/bzip2-1.0.8"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libbzip2.git@99d3c4812e2b98bc305ae4b867f35346946717f0"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:18:19Z",
                    "comment": "source-origin=winlibs-fork; upstream=libarchive/bzip2@bzip2-1.0.8; source=winlibs/libbzip2@libbzip2-1.0.8-1; source-commit=99d3c4812e2b98bc305ae4b867f35346946717f0"
                }
            ]
        },
        {
            "name": "libcurl",
            "SPDXID": "SPDXRef-Dependency-libcurl-8.21.0-1-72",
            "versionInfo": "8.21.0-1",
            "packageFileName": "libcurl-8.21.0-1-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libcurl-8.21.0-1-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "curl",
            "licenseDeclared": "curl",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: curl",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/curl@8.21.0"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:haxx:curl:8.21.0:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/curl/curl"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/curl/curl/tree/curl-8_21_0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/curl.git@b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-17T13:29:21Z",
                    "comment": "source-origin=winlibs-fork; upstream=curl/curl@curl-8_21_0; source=winlibs/curl@libcurl-8.21.0-1; source-commit=b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0"
                }
            ]
        },
        {
            "name": "libssh2",
            "SPDXID": "SPDXRef-Dependency-libssh2-1.11.1-7-73",
            "versionInfo": "1.11.1-7",
            "packageFileName": "libssh2-1.11.1-7-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libssh2-1.11.1-7-vs17-x64.zip",
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: libssh2",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libssh2@1.11.1"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:libssh2:libssh2:1.11.1:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/libssh2/libssh2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/libssh2/libssh2/tree/libssh2-1.11.1"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libssh2.git@7817741ff29d52165b0e8c157acbe4c0ec582117"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-02T09:28:50Z",
                    "comment": "source-origin=winlibs-fork; upstream=libssh2/libssh2@libssh2-1.11.1; source=winlibs/libssh2@libssh2-1.11.1-7; source-commit=7817741ff29d52165b0e8c157acbe4c0ec582117; fixed-cves=CVE-2026-7598,CVE-2025-15661,CVE-2026-55199,CVE-2026-55200,CVE-2026-58050,CVE-2026-58051,CVE-2026-66032,CVE-2026-66033,CVE-2026-66034,CVE-2026-66035"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "openssl",
            "SPDXID": "SPDXRef-Dependency-openssl-3.5.7-74",
            "versionInfo": "3.5.7",
            "packageFileName": "openssl-3.5.7-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openssl-3.5.7-vs17-x64.zip",
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "Apache-2.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: openssl",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/openssl@3.5.7"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/openssl/openssl"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/openssl/openssl/tree/openssl-3.5.7"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/openssl.git@07444295ce1ca3175b58a18c9da732c14393161e"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:50:44Z",
                    "comment": "source-origin=winlibs-fork; upstream=openssl/openssl@openssl-3.5.7; source=winlibs/openssl@openssl-3.5.7; source-commit=07444295ce1ca3175b58a18c9da732c14393161e"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "libzstd",
            "SPDXID": "SPDXRef-Dependency-libzstd-1.5.7-75",
            "versionInfo": "1.5.7",
            "packageFileName": "libzstd-1.5.7-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libzstd-1.5.7-vs17-x64.zip",
            "licenseConcluded": "BSD-3-Clause OR GPL-2.0-only",
            "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: facebook",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/zstd@1.5.7"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/facebook/zstd"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/facebook/zstd/tree/v1.5.7"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/facebook/zstd.git@f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:19:47Z",
                    "comment": "source-origin=upstream; upstream=facebook/zstd@v1.5.7; source=facebook/zstd@v1.5.7; source-commit=f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "nghttp2",
            "SPDXID": "SPDXRef-Dependency-nghttp2-1.70.0-76",
            "versionInfo": "1.70.0",
            "packageFileName": "nghttp2-1.70.0-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/nghttp2-1.70.0-vs17-x64.zip",
            "licenseConcluded": "MIT",
            "licenseDeclared": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: nghttp2",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/nghttp2@1.70.0"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:nghttp2:nghttp2:1.70.0:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/nghttp2/nghttp2/tree/v1.70.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/nghttp2.git@50895b5f3cebeb2553a4e40a62561707a1a129e0"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-17T13:25:27Z",
                    "comment": "source-origin=winlibs-fork; upstream=nghttp2/nghttp2@v1.70.0; source=winlibs/nghttp2@nghttp2-1.70.0; source-commit=50895b5f3cebeb2553a4e40a62561707a1a129e0"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "libenchant2",
            "SPDXID": "SPDXRef-Dependency-libenchant2-2.8.19-77",
            "versionInfo": "2.8.19",
            "packageFileName": "libenchant2-2.8.19-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libenchant2-2.8.19-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "LGPL-2.1-or-later",
            "licenseDeclared": "LGPL-2.1-or-later",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: AbiWord",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/enchant@2.8.19"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/AbiWord/enchant"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/AbiWord/enchant/tree/v2.8.19"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/enchant.git@37e09ab3d76d61784d8a9d4cca2badbd56d080f4"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-17T14:14:15Z",
                    "comment": "source-origin=winlibs-fork; upstream=AbiWord/enchant@v2.8.19; source=winlibs/enchant@libenchant2-2.8.19; source-commit=37e09ab3d76d61784d8a9d4cca2badbd56d080f4"
                }
            ]
        },
        {
            "name": "libiconv",
            "SPDXID": "SPDXRef-Dependency-libiconv-1.19-78",
            "versionInfo": "1.19",
            "packageFileName": "libiconv-1.19-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libiconv-1.19-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "LGPL-2.1-or-later",
            "licenseDeclared": "LGPL-2.1-or-later",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: git.savannah.gnu.org",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libiconv@1.19"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libiconv.git@8f55a0aa6532f30f947261d90e72b200f350a5df"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:18:18Z",
                    "comment": "source-origin=winlibs-fork; upstream=https://git.savannah.gnu.org/git/libiconv.git@v1.19; source=winlibs/libiconv@libiconv-1.19; source-commit=8f55a0aa6532f30f947261d90e72b200f350a5df"
                }
            ]
        },
        {
            "name": "libjpeg-turbo",
            "SPDXID": "SPDXRef-Dependency-libjpeg-turbo-3.2.0-79",
            "versionInfo": "3.2.0",
            "packageFileName": "libjpeg-turbo-3.2.0-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libjpeg-turbo-3.2.0-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause AND IJG",
            "licenseDeclared": "BSD-3-Clause AND IJG",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: libjpeg-turbo",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libjpeg-turbo@3.2.0"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:3.2.0:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/libjpeg-turbo/libjpeg-turbo/tree/3.2.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libjpeg.git@66ef88ad97f3c47eb1c7b85f2637ff1073ebce9b"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-04T04:08:54Z",
                    "comment": "source-origin=winlibs-fork; upstream=libjpeg-turbo/libjpeg-turbo@3.2.0; source=winlibs/libjpeg@libjpeg-turbo-3.2.0; source-commit=66ef88ad97f3c47eb1c7b85f2637ff1073ebce9b"
                }
            ]
        },
        {
            "name": "liblmdb",
            "SPDXID": "SPDXRef-Dependency-liblmdb-0.9.35-80",
            "versionInfo": "0.9.35",
            "packageFileName": "liblmdb-0.9.35-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/liblmdb-0.9.35-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "OLDAP-2.8",
            "licenseDeclared": "OLDAP-2.8",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: LMDB",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/lmdb@0.9.35"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/LMDB/lmdb"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/LMDB/lmdb/tree/LMDB_0.9.35"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/lmdb.git@337459047d55fbf52e634bc26285195d06ac145d"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:19:09Z",
                    "comment": "source-origin=winlibs-fork; upstream=LMDB/lmdb@LMDB_0.9.35; source=winlibs/lmdb@liblmdb-0.9.35; source-commit=337459047d55fbf52e634bc26285195d06ac145d"
                }
            ]
        },
        {
            "name": "liblzma",
            "SPDXID": "SPDXRef-Dependency-liblzma-5.8.3-81",
            "versionInfo": "5.8.3",
            "packageFileName": "liblzma-5.8.3-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/liblzma-5.8.3-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "0BSD",
            "licenseDeclared": "0BSD",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: tukaani-project",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/xz@5.8.3"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/tukaani-project/xz"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/tukaani-project/xz/tree/v5.8.3"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/liblzma.git@debf994b6385f384f01815eaac4597e3c2e2cc4e"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:21:05Z",
                    "comment": "source-origin=winlibs-fork; upstream=tukaani-project/xz@v5.8.3; source=winlibs/liblzma@liblzma-5.8.3; source-commit=debf994b6385f384f01815eaac4597e3c2e2cc4e"
                }
            ]
        },
        {
            "name": "libonig",
            "SPDXID": "SPDXRef-Dependency-libonig-6.9.10-82",
            "versionInfo": "6.9.10",
            "packageFileName": "libonig-6.9.10-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libonig-6.9.10-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-2-Clause",
            "licenseDeclared": "BSD-2-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: kkos",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/oniguruma@6.9.10"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/kkos/oniguruma"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/kkos/oniguruma/tree/v6.9.10"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/oniguruma.git@fceeeffdb609661ffaea9be4075c6ff4d6696611"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:18:06Z",
                    "comment": "source-origin=winlibs-fork; upstream=kkos/oniguruma@v6.9.10; source=winlibs/oniguruma@libonig-6.9.10; source-commit=fceeeffdb609661ffaea9be4075c6ff4d6696611"
                }
            ]
        },
        {
            "name": "libpng",
            "SPDXID": "SPDXRef-Dependency-libpng-1.6.58-83",
            "versionInfo": "1.6.58",
            "packageFileName": "libpng-1.6.58-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libpng-1.6.58-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "libpng-2.0",
            "licenseDeclared": "libpng-2.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: pnggroup",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libpng@1.6.58"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:libpng:libpng:1.6.58:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/pnggroup/libpng"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/pnggroup/libpng/tree/v1.6.58"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libpng.git@5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:58:39Z",
                    "comment": "source-origin=winlibs-fork; upstream=pnggroup/libpng@v1.6.58; source=winlibs/libpng@libpng-1.6.58; source-commit=5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                }
            ]
        },
        {
            "name": "libpq",
            "SPDXID": "SPDXRef-Dependency-libpq-16.15-84",
            "versionInfo": "16.15",
            "packageFileName": "libpq-16.15-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libpq-16.15-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "PostgreSQL",
            "licenseDeclared": "PostgreSQL",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: postgres",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/postgresql@16.15"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:postgresql:postgresql:16.15:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/postgres/postgres"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/postgres/postgres/tree/REL_16_15"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/postgresql.git@5cb6f940a63def19804e2f8c954bf985e4e30724"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-15T04:25:38Z",
                    "comment": "source-origin=winlibs-fork; upstream=postgres/postgres@REL_16_15; source=winlibs/postgresql@libpq-16.15; source-commit=5cb6f940a63def19804e2f8c954bf985e4e30724; not-affected-cves=CVE-2017-8806"
                }
            ]
        },
        {
            "name": "openssl",
            "SPDXID": "SPDXRef-Dependency-openssl-3.0.21.pl1-85",
            "versionInfo": "3.0.21.pl1",
            "packageFileName": "openssl-3.0.21.pl1-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openssl-3.0.21.pl1-vs17-x64.zip",
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "Apache-2.0",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: openssl",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/openssl@3.0.21"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:openssl:openssl:3.0.21:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/openssl/openssl"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/openssl/openssl/tree/openssl-3.0.21"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/openssl.git@76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:37:02Z",
                    "comment": "source-origin=winlibs-fork; upstream=openssl/openssl@openssl-3.0.21; source=winlibs/openssl@openssl-3.0.21.pl1; source-commit=76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "libqdbm",
            "SPDXID": "SPDXRef-Dependency-libqdbm-1.8.78-86",
            "versionInfo": "1.8.78",
            "packageFileName": "libqdbm-1.8.78-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libqdbm-1.8.78-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "LGPL-2.1-or-later",
            "licenseDeclared": "LGPL-2.1-or-later",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: dbmx.net",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/qdbm@1.8.78"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://dbmx.net/qdbm/"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://dbmx.net/qdbm/"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/qdbm.git@586aa477ff42f0d307dc26adada275642630b28f"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:18:12Z",
                    "comment": "source-origin=winlibs-fork; upstream=https://dbmx.net/qdbm/@qdbm-1.8.78; source=winlibs/qdbm@libqdbm-1.8.78; source-commit=586aa477ff42f0d307dc26adada275642630b28f"
                }
            ]
        },
        {
            "name": "libsasl",
            "SPDXID": "SPDXRef-Dependency-libsasl-2.1.28-87",
            "versionInfo": "2.1.28",
            "packageFileName": "libsasl-2.1.28-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libsasl-2.1.28-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-4-Clause",
            "licenseDeclared": "BSD-4-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: cyrusimap",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/cyrus-sasl@2.1.28"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/cyrusimap/cyrus-sasl/tree/cyrus-sasl-2.1.28"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/cyrus-sasl.git@63a75ce9293206aea981e9f3edcd96645bafd677"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:59:15Z",
                    "comment": "source-origin=winlibs-fork; upstream=cyrusimap/cyrus-sasl@cyrus-sasl-2.1.28; source=winlibs/cyrus-sasl@libsasl-2.1.28; source-commit=63a75ce9293206aea981e9f3edcd96645bafd677"
                }
            ]
        },
        {
            "name": "sqlite3",
            "SPDXID": "SPDXRef-Dependency-sqlite3-3.53.2-88",
            "versionInfo": "3.53.2",
            "packageFileName": "sqlite3-3.53.2-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/sqlite3-3.53.2-vs17-x64.zip",
            "licenseConcluded": "blessing",
            "licenseDeclared": "blessing",
            "copyrightText": "NONE",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: sqlite",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/sqlite@3.53.2"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:sqlite:sqlite:3.53.2:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/sqlite/sqlite"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/sqlite/sqlite/tree/version-3.53.2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/sqlite3.git@1317473784d608cfe3193628ccbe27ed2dedc3fe"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:19:22Z",
                    "comment": "source-origin=winlibs-fork; upstream=sqlite/sqlite@version-3.53.2; source=winlibs/sqlite3@sqlite3-3.53.2; source-commit=1317473784d608cfe3193628ccbe27ed2dedc3fe"
                }
            ],
            "filesAnalyzed": false
        },
        {
            "name": "libsodium",
            "SPDXID": "SPDXRef-Dependency-libsodium-1.0.22-89",
            "versionInfo": "1.0.22",
            "packageFileName": "libsodium-1.0.22-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libsodium-1.0.22-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "ISC",
            "licenseDeclared": "ISC",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: jedisct1",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libsodium@1.0.22"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/jedisct1/libsodium"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/jedisct1/libsodium/tree/1.0.22-RELEASE"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libsodium.git@1777bbc853d2aeb124e7b842a11b916193db7bdf"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:19:10Z",
                    "comment": "source-origin=winlibs-fork; upstream=jedisct1/libsodium@1.0.22-RELEASE; source=winlibs/libsodium@libsodium-1.0.22; source-commit=1777bbc853d2aeb124e7b842a11b916193db7bdf"
                }
            ]
        },
        {
            "name": "libtidy",
            "SPDXID": "SPDXRef-Dependency-libtidy-5.8.0-90",
            "versionInfo": "5.8.0",
            "packageFileName": "libtidy-5.8.0-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libtidy-5.8.0-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "Zlib",
            "licenseDeclared": "Zlib",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: htacg",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libtidy@5.8.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/htacg/tidy-html5"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/htacg/tidy-html5/tree/5.8.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libtidy.git@8b6229fd70409656257a6446a254fd62fde8a03a"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:19:13Z",
                    "comment": "source-origin=winlibs-fork; upstream=htacg/tidy-html5@5.8.0; source=winlibs/libtidy@libtidy-5.8.0; source-commit=8b6229fd70409656257a6446a254fd62fde8a03a"
                }
            ]
        },
        {
            "name": "libwebp",
            "SPDXID": "SPDXRef-Dependency-libwebp-1.6.0-91",
            "versionInfo": "1.6.0",
            "packageFileName": "libwebp-1.6.0-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libwebp-1.6.0-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: webmproject",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libwebp@1.6.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/webmproject/libwebp"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/webmproject/libwebp/tree/v1.6.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libwebp.git@1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:19:55Z",
                    "comment": "source-origin=winlibs-fork; upstream=webmproject/libwebp@v1.6.0; source=winlibs/libwebp@libwebp-1.6.0; source-commit=1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                }
            ]
        },
        {
            "name": "libxml2",
            "SPDXID": "SPDXRef-Dependency-libxml2-2.11.9-7-92",
            "versionInfo": "2.11.9-7",
            "packageFileName": "libxml2-2.11.9-7-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxml2-2.11.9-7-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: GNOME",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libxml2@2.11.9"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:xmlsoft:libxml2:2.11.9:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/GNOME/libxml2"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/GNOME/libxml2/tree/v2.11.9"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libxml2.git@f06d784607050c08a9b28b1fce2faa4236c052cf"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T19:59:36Z",
                    "comment": "source-origin=winlibs-fork; upstream=GNOME/libxml2@v2.11.9; source=winlibs/libxml2@libxml2-2.11.9-7; source-commit=f06d784607050c08a9b28b1fce2faa4236c052cf; fixed-cves=CVE-2024-56171,CVE-2025-24928,CVE-2025-27113,CVE-2025-32414,CVE-2025-32415,CVE-2025-49794,CVE-2025-49795,CVE-2025-49796,CVE-2025-6021,CVE-2025-6170,CVE-2025-7425,CVE-2025-8732,CVE-2026-0989,CVE-2026-0990,CVE-2026-0992,CVE-2026-1757,CVE-2023-45322,CVE-2026-11979"
                }
            ]
        },
        {
            "name": "libxpm",
            "SPDXID": "SPDXRef-Dependency-libxpm-3.5.19-93",
            "versionInfo": "3.5.19",
            "packageFileName": "libxpm-3.5.19-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxpm-3.5.19-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: gitlab.freedesktop.org",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libxpm@3.5.19"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://gitlab.freedesktop.org/xorg/lib/libxpm/-/tree/libXpm-3.5.19"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libxpm.git@90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:20:01Z",
                    "comment": "source-origin=winlibs-fork; upstream=https://gitlab.freedesktop.org/xorg/lib/libxpm@libXpm-3.5.19; source=winlibs/libxpm@libxpm-3.5.19; source-commit=90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                }
            ]
        },
        {
            "name": "libxslt",
            "SPDXID": "SPDXRef-Dependency-libxslt-1.1.43-2-94",
            "versionInfo": "1.1.43-2",
            "packageFileName": "libxslt-1.1.43-2-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxslt-1.1.43-2-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "MIT",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: GNOME",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libxslt@1.1.43"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:xmlsoft:libxslt:1.1.43:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/GNOME/libxslt"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/GNOME/libxslt/tree/v1.1.43"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libxslt.git@9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T20:01:12Z",
                    "comment": "source-origin=winlibs-fork; upstream=GNOME/libxslt@v1.1.43; source=winlibs/libxslt@libxslt-1.1.43-2; source-commit=9f399f8d223ddddeaeacd15285a2e993ec326c0f; fixed-cves=CVE-2025-10911,CVE-2025-11731,CVE-2025-7424; not-affected-cves=CVE-2025-7425"
                }
            ]
        },
        {
            "name": "libzip",
            "SPDXID": "SPDXRef-Dependency-libzip-1.11.4-95",
            "versionInfo": "1.11.4",
            "packageFileName": "libzip-1.11.4-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libzip-1.11.4-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: nih-at",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/libzip@1.11.4"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/nih-at/libzip"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/nih-at/libzip/tree/v1.11.4"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/libzip.git@94b3e6583c6ddf77d3fef95699310818a91bc23a"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:59:27Z",
                    "comment": "source-origin=winlibs-fork; upstream=nih-at/libzip@v1.11.4; source=winlibs/libzip@libzip-1.11.4; source-commit=94b3e6583c6ddf77d3fef95699310818a91bc23a"
                }
            ]
        },
        {
            "name": "mpir",
            "SPDXID": "SPDXRef-Dependency-mpir-3.0.0-2-96",
            "versionInfo": "3.0.0-2",
            "packageFileName": "mpir-3.0.0-2-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/mpir-3.0.0-2-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "LGPL-3.0-or-later",
            "licenseDeclared": "LGPL-3.0-or-later",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: wbhart",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/mpir@3.0.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/wbhart/mpir"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/wbhart/mpir/tree/mpir-3.0.0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/mpir.git@796ed2cee089c96dc254caec624fe9084c3a68c3"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:18:35Z",
                    "comment": "source-origin=winlibs-fork; upstream=wbhart/mpir@mpir-3.0.0; source=winlibs/mpir@mpir-3.0.0-2; source-commit=796ed2cee089c96dc254caec624fe9084c3a68c3"
                }
            ]
        },
        {
            "name": "net-snmp",
            "SPDXID": "SPDXRef-Dependency-net-snmp-5.9.4-97",
            "versionInfo": "5.9.4",
            "packageFileName": "net-snmp-5.9.4-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/net-snmp-5.9.4-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: net-snmp",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/net-snmp@5.9.4"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/net-snmp/net-snmp/tree/v5.9.4"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/net-snmp.git@0c478089ece16d6346fbf464a9ef00d17f123fc3"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:59:21Z",
                    "comment": "source-origin=winlibs-fork; upstream=net-snmp/net-snmp@v5.9.4; source=winlibs/net-snmp@net-snmp-5.9.4; source-commit=0c478089ece16d6346fbf464a9ef00d17f123fc3"
                }
            ]
        },
        {
            "name": "openldap",
            "SPDXID": "SPDXRef-Dependency-openldap-2.7.0-2-98",
            "versionInfo": "2.7.0-2",
            "packageFileName": "openldap-2.7.0-2-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openldap-2.7.0-2-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "OLDAP-2.8",
            "licenseDeclared": "OLDAP-2.8",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: openldap",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/openldap@2.7.0"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:openldap:openldap:2.7.0:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/openldap/openldap"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/openldap/openldap/tree/OPENLDAP_REL_ENG_2_7_0"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/openldap.git@4b2449a2e39d92b3b789ff71350b4bf70ed0713e"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-19T04:28:36Z",
                    "comment": "source-origin=winlibs-fork; upstream=openldap/openldap@OPENLDAP_REL_ENG_2_7_0; source=winlibs/openldap@openldap-2.7.0-2; source-commit=4b2449a2e39d92b3b789ff71350b4bf70ed0713e"
                }
            ]
        },
        {
            "name": "rxspencer",
            "SPDXID": "SPDXRef-Dependency-rxspencer-3.9.0-99",
            "versionInfo": "3.9.0",
            "downloadLocation": "https://github.com/garyhouston/rxspencer/tree/v3.9.0",
            "filesAnalyzed": false,
            "licenseConcluded": "Spencer-94",
            "licenseDeclared": "Spencer-94",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: garyhouston",
            "primaryPackagePurpose": "LIBRARY",
            "sourceInfo": "Embedded from rxspencer.",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/rxspencer@3.9.0"
                }
            ]
        },
        {
            "name": "sqlite3",
            "SPDXID": "SPDXRef-Dependency-sqlite3-3.53.4-100",
            "versionInfo": "3.53.4",
            "packageFileName": "sqlite3-3.53.4-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/sqlite3-3.53.4-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "blessing",
            "licenseDeclared": "blessing",
            "copyrightText": "NONE",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: sqlite",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/sqlite@3.53.4"
                },
                {
                    "referenceCategory": "SECURITY",
                    "referenceType": "cpe23Type",
                    "referenceLocator": "cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/sqlite/sqlite"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/sqlite/sqlite/tree/version-3.53.4"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/sqlite3.git@90771f2f145baf5b9a2e094ff9ad36d700079125"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-08-17T12:19:16Z",
                    "comment": "source-origin=winlibs-fork; upstream=sqlite/sqlite@version-3.53.4; source=winlibs/sqlite3@sqlite3-3.53.4; source-commit=90771f2f145baf5b9a2e094ff9ad36d700079125"
                }
            ]
        },
        {
            "name": "wineditline",
            "SPDXID": "SPDXRef-Dependency-wineditline-2.208-101",
            "versionInfo": "2.208",
            "packageFileName": "wineditline-2.208-vs17-x64.zip",
            "downloadLocation": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/wineditline-2.208-vs17-x64.zip",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "BSD-3-Clause",
            "copyrightText": "See accompanying license and notice files.",
            "supplier": "Organization: Winlibs",
            "originator": "Organization: ptosco",
            "primaryPackagePurpose": "LIBRARY",
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceType": "purl",
                    "referenceLocator": "pkg:generic/wineditline@2.208"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/ptosco/wineditline"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "https://github.com/ptosco/wineditline/tree/wineditline-2.208"
                },
                {
                    "referenceCategory": "OTHER",
                    "referenceType": "website",
                    "referenceLocator": "git+https://github.com/winlibs/wineditline.git@39ae4ff02a06c97f804833844b767777d6625fb8"
                }
            ],
            "annotations": [
                {
                    "annotationType": "OTHER",
                    "annotator": "Tool: winlib-builder-sbom-1.0.0",
                    "annotationDate": "2026-07-16T10:20:05Z",
                    "comment": "source-origin=winlibs-fork; upstream=ptosco/wineditline@wineditline-2.208; source=winlibs/wineditline@WinEditLine-2.208; source-commit=39ae4ff02a06c97f804833844b767777d6625fb8"
                }
            ]
        }
    ],
    "relationships": [
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relationshipType": "DESCRIBES",
            "relatedSpdxElement": "SPDXRef-PHP"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-Berkeley-uuencode-snapshot-25636b9321c2-1"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-Boost.Context-assembly-snapshot-6abda7f14758-2"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-crypt-blowfish-1.3-3"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-DynASM-1.5.0-4"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-FreeSec-libcrypt-snapshot-6b1d1d57b0af-5"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-libarchive-tar-format-octal-snapshot-36341177800f-6"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-libavifinfo-2b924defa4c2cd227540efe164067a8cc913eeba-7"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-libbcmath-0.2-8"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-libgd-2.0.35-9"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-libmagic-5.46-10"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-libmbfl-1.3.2-11"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-libzip-zip-dirent-snapshot-79aa92b5cca9-12"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-MTRand-1.0-13"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-OpenLDAP-ucgendat-snapshot-572651bf88b0-14"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-pcre2lib-10.44-15"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-snprintf-snapshot-42618fe2e789-16"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-strlcat-snapshot-d2244e6a54fe-17"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-strlcpy-snapshot-144d697952d1-18"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-strnatcmp-snapshot-e14f21965b39-19"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-Tcl-scanf-implementation-8.3.0-20"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-timelib-2022.17-21"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-XKCP-SHA-3-snapshot-aba3170bb6e1-22"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Source-xxHash-0.8.1-23"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-ICU-77.1-1-24"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-apache-2.4.68-25"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-apache-2.4.68-25",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-apr-iconv-1.2.2-26"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-apr-util-1.6.3-27",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-apr-util-x64-windows-c0221bb1ebe3af251a9b9a69917701cf75f2bbfafabb4c88ee331dba0aad8dcd-28"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-apr-1.7.6-1-30",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-apr-x64-windows-03919ccf3f69b15eba8f04368099f5d3dc5c23ed3526015ec9137984d41c4fad-31"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-brotli-1.2.0-33",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-brotli-x64-windows-45a3ef2859dd01b67fd278f7750b1e843fcc4554fd5350940963f48da31a7426-34"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-curl-8.21.0-1-36",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-curl-x64-windows-ea772160a9dd49cf8c0365727979d54a2593b7e9b057572af2174857bd60016e-37"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-expat-2.8.2-39",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-expat-x64-windows-c1722303603d771cc7dd274c0d811b2d1f3caf311b6117a74e9ef24bd7c7a1e6-40"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-jansson-2.15.1-42",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-jansson-x64-windows-678d7ad3250826f28d4b77b4c2ef87cb6b02d5dfb8d29c14eeac3f5cf5a1ced4-43"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-lua-5.5.0-1-45",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-lua-x64-windows-e8f14584d48e1c2107547c9f22b9a9eccf73691b4aa033d797703ff440500676-46"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-nghttp2-1.69.0-48",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-nghttp2-x64-windows-1ea9da733d3d49024dff92b30043ee27dba59373816942b3d8c986b8a5edb676-49"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-openssl-3.6.3-51",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-openssl-x64-windows-8ebeacc935df08d9d1c210b16ef5af918196229f49850b57a60b800802600677-52"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-pcre2-10.47-1-54",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-pcre2-x64-windows-1b0a3280c093bfad0beafbc16e9be01ee86d1064a85163ebb3afc7b0a5339ddc-55"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-zlib-1.3.2-1-58",
            "relationshipType": "GENERATES",
            "relatedSpdxElement": "SPDXRef-Dependency-zlib-x64-windows-5ae23b0077d1eaea33185c69c114d098231e93cc7d2c77a8123d625ddd85c44b-59"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-brotli-1.2.0-61"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-fbclient-4.0.7-62"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-freetype-2.14.3-63"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-glib-2.88.3-64"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-glib-2.88.3-64",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libffi-3.8.0-65"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-glib-2.88.3-64",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libintl-1.0-66"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-glib-2.88.3-64",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-zlib-1.3.2-67"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libargon2-20190702-68"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libavif-1.4.2-69"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libavif-1.4.2-69",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-aom-3.14.1-70"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libbzip2-1.0.8-1-71"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libcurl-8.21.0-1-72"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libcurl-8.21.0-1-72",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-brotli-1.2.0-61"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libcurl-8.21.0-1-72",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libssh2-1.11.1-7-73"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libssh2-1.11.1-7-73",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-openssl-3.5.7-74"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libssh2-1.11.1-7-73",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-zlib-1.3.2-67"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libcurl-8.21.0-1-72",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libzstd-1.5.7-75"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libcurl-8.21.0-1-72",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-nghttp2-1.70.0-76"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libcurl-8.21.0-1-72",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-openssl-3.5.7-74"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libcurl-8.21.0-1-72",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-zlib-1.3.2-67"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libenchant2-2.8.19-77"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libenchant2-2.8.19-77",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-glib-2.88.3-64"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libffi-3.8.0-65"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libiconv-1.19-78"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libintl-1.0-66"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libjpeg-turbo-3.2.0-79"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-liblmdb-0.9.35-80"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-liblzma-5.8.3-81"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libonig-6.9.10-82"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libpng-1.6.58-83"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libpng-1.6.58-83",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-zlib-1.3.2-67"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libpq-16.15-84"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libpq-16.15-84",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-openssl-3.0.21.pl1-85"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libqdbm-1.8.78-86"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libsasl-2.1.28-87"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libsasl-2.1.28-87",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-liblmdb-0.9.35-80"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libsasl-2.1.28-87",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-openssl-3.0.21.pl1-85"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libsasl-2.1.28-87",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-sqlite3-3.53.2-88"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libsodium-1.0.22-89"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libssh2-1.11.1-7-73"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libtidy-5.8.0-90"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libwebp-1.6.0-91"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libxml2-2.11.9-7-92"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libxml2-2.11.9-7-92",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libiconv-1.19-78"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libxpm-3.5.19-93"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libxslt-1.1.43-2-94"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libxslt-1.1.43-2-94",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libiconv-1.19-78"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libxslt-1.1.43-2-94",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libxml2-2.11.9-7-92"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libzip-1.11.4-95"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libzip-1.11.4-95",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libbzip2-1.0.8-1-71"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libzip-1.11.4-95",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-liblzma-5.8.3-81"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-libzip-1.11.4-95",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-zlib-1.3.2-67"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libzstd-1.5.7-75"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-mpir-3.0.0-2-96"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-net-snmp-5.9.4-97"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-net-snmp-5.9.4-97",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-openssl-3.0.21.pl1-85"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-nghttp2-1.70.0-76"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-openldap-2.7.0-2-98"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-openldap-2.7.0-2-98",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-rxspencer-3.9.0-99"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-openldap-2.7.0-2-98",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-libsasl-2.1.28-87"
        },
        {
            "spdxElementId": "SPDXRef-Dependency-openldap-2.7.0-2-98",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-openssl-3.0.21.pl1-85"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-openssl-3.5.7-74"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-sqlite3-3.53.4-100"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-wineditline-2.208-101"
        },
        {
            "spdxElementId": "SPDXRef-PHP",
            "relationshipType": "DEPENDS_ON",
            "relatedSpdxElement": "SPDXRef-Dependency-zlib-1.3.2-67"
        }
    ],
    "hasExtractedLicensingInfos": [
        {
            "licenseId": "LicenseRef-fbclient-IDPL-1.0",
            "extractedText": "Initial Developer's PUBLIC LICENSE\r\n               Version 1.0 \r\n\r\n   1. Definitions\r\n\r\n      1.0 \"Commercial Use\" means distribution or otherwise making the Covered \r\n      Code available to a third party. \r\n\r\n      1.1 ''Contributor'' means each entity that creates or contributes to the \r\n      creation of Modifications. \r\n\r\n      1.2 ''Contributor Version'' means the combination of the Original Code, prior \r\n      Modifications used by a Contributor, and the Modifications made by that \r\n      particular Contributor. \r\n\r\n      1.3. ''Covered Code'' means the Original Code or Modifications or the \r\n      combination of the Original Code and Modifications, in each case including \r\n      portions thereof. \r\n\r\n      1.4. ''Electronic Distribution Mechanism'' means a mechanism generally \r\n      accepted in the software development community for the electronic transfer of \r\n      data. \r\n\r\n      1.5. ''Executable'' means Covered Code in any form other than Source Code. \r\n\r\n      1.6. ''Initial Developer'' means the individual or entity identified as the Initial \r\n      Developer in the Source Code notice required by Exhibit A. \r\n\r\n      1.7. ''Larger Work'' means a work which combines Covered Code or portions \r\n      thereof with code not governed by the terms of this License. \r\n\r\n      1.8. ''License'' means this document. \r\n\r\n         1.8.1. \"Licensable\" means having the right to grant, to the maximum \r\n         extent possible, whether at the time of the initial grant or subsequently \r\n         acquired, any and all of the rights conveyed herein.\r\n\r\n      1.9. ''Modifications'' means any addition to or deletion from the substance or \r\n      structure of either the Original Code or any previous Modifications. When \r\n      Covered Code is released as a series of files, a Modification is: \r\n\r\n         Any addition to or deletion from the contents of a file containing Original \r\n         Code or previous Modifications. \r\n\r\n         Any new file that contains any part of the Original Code or previous \r\n         Modifications. \r\n\r\n      1.10. ''Original Code'' means Source Code of computer software code which \r\n      is described in the Source Code notice required by Exhibit A as Original Code, \r\n      and which, at the time of its release under this License is not already Covered \r\n      Code governed by this License. \r\n\r\n         1.10.1. \"Patent Claims\" means any patent claim(s), now owned or \r\n         hereafter acquired, including without limitation, method, process, and \r\n         apparatus claims, in any patent Licensable by grantor.\r\n\r\n      1.11. ''Source Code'' means the preferred form of the Covered Code for \r\n      making modifications to it, including all modules it contains, plus any associated \r\n      interface definition files, scripts used to control compilation and installation of \r\n      an Executable, or source code differential comparisons against either the \r\n      Original Code or another well known, available Covered Code of the \r\n      Contributor's choice. The Source Code can be in a compressed or archival \r\n      form, provided the appropriate decompression or de-archiving software is \r\n      widely available for no charge.\r\n\r\n      1.12. \"You'' (or \"Your\") means an individual or a legal entity exercising rights \r\n      under, and complying with all of the terms of, this License or a future version \r\n      of this License issued under Section 6.1. For legal entities, \"You'' includes any \r\n      entity w hich controls, is controlled by, or is under common control with You. \r\n      For purposes of this definition, \"control'' means (a) the power, direct or \r\n      indirect, to cause the direction or management of such entity, whether by \r\n      contract or otherwise, or (b) ownership of more than fifty percent (50%) of \r\n      the outstanding shares or beneficial ownership of such entity. \r\n\r\n\r\n   2. Source Code License.\r\n\r\n\r\n   2.1. The Initial Developer Grant. The Initial Developer hereby grants You a \r\n   world-wide, royalty-free, non-exclusive license, subject to third party intellectual \r\n   property claims: \r\n\r\n      (a) under intellectual property rights (other than patent or trademark) \r\n      Licensable by Initial Developer to use, reproduce, modify, display, perform, \r\n      sublicense and distribute the Original Code (or portions thereof) with or without \r\n      Modifications, and/or as part of a Larger Work; and \r\n\r\n      (b) under Patents Claims infringed by the making, using or selling of Original \r\n      Code, to make, have made, use, practice, sell, and offer for sale, and/or \r\n      otherwise dispose of the Original Code (or portions thereof). \r\n      (c) the licenses granted in this Section 2.1(a) and (b) are effective on the date \r\n      Initial Developer first distributes Original Code under the terms of this License. \r\n\r\n      d) Notwithstanding Section 2.1(b) above, no patent license is granted:\r\n\r\n         1) for code that You delete from the Original Code; \r\n\r\n         2) separate from the Original Code; or \r\n\r\n         3) for infringements caused by: \r\n\r\n            i) the modification of the Original Code or \r\n\r\n            ii) the combination of the Original Code with other software or \r\n            devices. \r\n\r\n   2.2. Contributor Grant. Subject to third party intellectual property claims, each \r\n   Contributor hereby grants You a world-wide, royalty-free, non-exclusive license \r\n\r\n      (a) under intellectual property rights (other than patent or trademark) \r\n      Licensable by Contributor, to use, reproduce, modify, display, perform, \r\n      sublicense and distribute the Modifications created by such Contributor (or \r\n      portions thereof) either on an unmodified basis, with other Modifications, as \r\n      Covered Code and/or as part of a Larger Work; and \r\n\r\n      (b) under Patent Claims infringed by the making, using, or selling of \r\n      Modifications made by that Contributor either alone and/or in combination with \r\n      its Contributor Version (or portions of such combination), to make, use, sell, \r\n      offer for sale, have made, and/or otherwise dispose of: 1) Modifications made \r\n      by that Contributor (or portions thereof); and 2) the combination of \r\n      Modifications made by that Contributor with its Contributor Version (or portions \r\n      of such combination). \r\n\r\n      (c) the licenses granted in Sections 2.2(a) and 2.2(b) are effective on the date \r\n      Contributor first makes Commercial Use of the Covered Code. \r\n\r\n      (d) Notwithstanding Section 2.2(b) above, no patent license is granted:\r\n\r\n         1) for any code that Contributor has deleted from the Contributor \r\n         Version; \r\n\r\n         2) separate from the Contributor Version; \r\n\r\n         3) for infringements caused by: \r\n\r\n         i) third party modifications of Contributor Version or \r\n\r\n            ii) the combination of Modifications made by that Contributor with \r\n            other software (except as part of the Contributor Version) or \r\n            other devices; or \r\n\r\n         4) under Patent Claims infringed by Covered Code in the absence of \r\n         Modifications made by that Contributor. \r\n\r\n\r\n   3. Distribution Obligations.\r\n\r\n\r\n      3.1. Application of License. The Modifications which You create or to which \r\n      You contribute are governed by the terms of this License, including without \r\n      limitation Section 2.2. The Source Code version of Covered Code may be \r\n      distributed only under the terms of this License or a future version of this \r\n      License released under Section 6.1, and You must include a copy of this \r\n      License with every copy of the Source Code You distribute. You may not offer \r\n      or impose any terms on any Source Code version that alters or restricts the \r\n      applicable version of this License or the recipients' rights hereunder. However, \r\n      You may include an additional document offering the additional rights described \r\n      in Section 3.5. \r\n\r\n\r\n      3.2. Availability of Source Code. Any Modification which You create or to \r\n      which You contribute must be made available in Source Code form under the \r\n      terms of this License either on the same media as an Executable version or via \r\n      an accepted Electronic Distribution Mechanism to anyone to whom you made \r\n      an Executable version available; and if made available via Electronic Distribution \r\n      Mechanism, must remain available for at least twelve (12) months after the \r\n      date it initially became available, or at least six (6) months after a subsequent \r\n      version of that particular Modification has been made available to such \r\n      recipients. You are responsible for ensuring that the Source Code version \r\n      remains available even if the Electronic Distribution Mechanism is maintained by \r\n      a third party. \r\n\r\n\r\n      3.3. Description of Modifications. You must cause all Covered Code to \r\n      which You contribute to contain a file documenting the changes You made to \r\n      create that Covered Code and the date of any change. You must include a \r\n      prominent statement that the Modification is derived, directly or indirectly, from \r\n      Original Code provided by the Initial Developer and including the name of the \r\n      Initial Developer in \r\n\r\n         (a) the Source Code, and\r\n\r\n         (b) in any notice in an Executable version or related documentation in \r\n         which You describe the origin or ownership of the Covered Code.\r\n\r\n\r\n      3.4. Intellectual Property Matters\r\n\r\n         a) Third Party Claims. If Contributor has knowledge that a license under \r\n         a third party's intellectual property rights is required to exercise the \r\n         rights granted by such Contributor under Sections 2.1 or 2.2, \r\n         Contributor must include a text file with the Source Code distribution \r\n         titled \"LEGAL'' which describes the claim and the party making the claim \r\n         in sufficient detail that a recipient will know whom to contact. If \r\n         Contributor obtains such knowledge after the Modification is made \r\n         available as described in Section 3.2, Contributor shall promptly modify \r\n         the LEGAL file in all copies Contributor makes available thereafter and \r\n         shall take other steps (such as notifying appropriate mailing lists or \r\n         newsgroups) reasonably calculated to inform those who received the \r\n         Covered Code that new knowledge has been obtained. \r\n\r\n         (b) Contributor APIs. If Contributor's Modifications include an application \r\n         programming interface and Contributor has knowledge of patent \r\n         licenses which are reasonably necessary to implement that API, \r\n         Contributor must also include this information in the LEGAL file. \r\n\r\n\r\n         (c) Representations. Contributor represents that, except as disclosed \r\n         pursuant to Section 3.4(a) above, Contributor believes that Contributor's \r\n         Modifications are Contributor's original creation(s) and/or Contributor \r\n         has sufficient rights to grant the rights conveyed by this License. \r\n\r\n\r\n      3.5. Required Notices. You must duplicate the notice in Exhibit A in each file \r\n      of the Source Code. If it is not possible to put such notice in a particular Source \r\n      Code file due to its structure, then You must include such notice in a location \r\n      (such as a relevant directory) where a user would be likely to look for such a \r\n      notice. If You created one or more Modification(s) You may add your name as \r\n      a Contributor to the notice described in Exhibit A. You must also duplicate this \r\n      License in any documentation for the Source Code where You describe \r\n      recipients' rights or ownership rights relating to Covered Code. You may \r\n      choose to offer, and to charge a fee for, warranty, support, indemnity or \r\n      liability obligations to one or more recipients of Covered Code. However, You \r\n      may do so only on Your own behalf, and not on behalf of the Initial Developer \r\n      or any Contributor. You must make it absolutely clear than any such warranty, \r\n      support, indemnity or liability obligation is offered by You alone, and You \r\n      hereby agree to indemnify the Initial Developer and every Contributor for any \r\n      liability incurred by the Initial Developer or such Contributor as a result of \r\n      warranty, support, indemnity or liability terms You offer. \r\n\r\n\r\n      3.6. Distribution of Executable Versions. You may distribute Covered \r\n      Code in Executable form only if the requirements of Section 3.1-3.5 have been \r\n      met for that Covered Code, and if You include a notice stating that the Source \r\n      Code version of the Covered Code is available under the terms of this License, \r\n      including a description of how and where You have fulfilled the obligations of \r\n      Section 3.2. The notice must be conspicuously included in any notice in an \r\n      Executable version, related documentation or collateral in which You describe \r\n      recipients' rights relating to the Covered Code. You may distribute the \r\n      Executable version of Covered Code or ownership rights under a license of \r\n      Your choice, which may contain terms different from this License, provided \r\n      that You are in compliance with the terms of this License and hat the license \r\n      for the Executable version does not attempt to limit or alter the recipient's rights \r\n      in the Source Code version from the rights set forth in this License. If You \r\n      distribute the Executable version under a different license You must make it \r\n      absolutely clear that any terms which differ from this License are offered by \r\n      You alone, not by the Initial Developer or any Contributor. You hereby agree to \r\n      indemnify the Initial Developer and every Contributor for any liability incurred by \r\n      the Initial Developer or such Contributor as a result of any such terms You \r\n      offer. \r\n\r\n\r\n      3.7. Larger Works. You may create a Larger Work by combining Covered \r\n      Code with other code not governed by the terms of this License and distribute \r\n      the Larger Work as a single product. In such a case, You must make sure the \r\n      requirements of this License are fulfilled for the Covered Code. \r\n\r\n\r\n   4. Inability to Comply Due to Statute or Regulation.\r\n\r\n    \r\n\r\n   If it is impossible for You to comply with any of the terms of this License with respect \r\n   to some or all of the Covered Code due to statute, judicial order, or regulation then You \r\n   must: \r\n\r\n      (a) comply with the terms of this License to the maximum extent possible; and \r\n\r\n      (b) describe the limitations and the code they affect. Such description must be \r\n      included in the LEGAL file described in Section 3.4 and must be included with \r\n      all distributions of the Source Code. Except to the extent prohibited by statute \r\n      or regulation, such description must be sufficiently detailed for a recipient of \r\n      ordinary skill to be able to understand it. \r\n\r\n\r\n   5. Application of this License.\r\n\r\n    \r\n\r\n   This License applies to code to which the Initial Developer has attached the notice in \r\n   Exhibit A and to related Covered Code. \r\n\r\n\r\n   6. Versions of the License.\r\n\r\n\r\n      6.1. New Versions. The Initial Developer of this code may publish revised \r\n      and/or new versions of the License from time to time. Each version will be \r\n      given a distinguishing version number. \r\n\r\n\r\n      6.2. Effect of New Versions. Once Covered Code has been published under \r\n      a particular version of the License, You may always continue to use it under \r\n      the terms of that version. You may also choose to use such Covered Code \r\n      under the terms of any subsequent version of the License published by the \r\n      Initial Developer. No one other than the Initial Developer has the right to modify \r\n      the terms applicable to Covered Code created under this License.\r\n\r\n\r\n      6.3. Derivative Works. If You create or use a modified version of this License \r\n      (which you may only do in order to apply it to code which is not already \r\n      Covered Code governed by this License), You must \r\n\r\n         (a) rename Your license so that the phrases ''Mozilla'', ''MOZILLAPL'', \r\n         ''MOZPL'', ''Netscape'', \"MPL\", ''NPL\", or any confusingly similar phrases \r\n         do not appear in your license (except to note that your license differs \r\n         from this License) and \r\n\r\n         (b) otherwise make it clear that Your version of the license contains \r\n         terms which differ from the Mozilla Public License and Netscape Public \r\n         License. (Filling in the name of the Initial Developer, Original Code or \r\n         Contributor in the notice described in Exhibit A shall not of themselves \r\n         be deemed to be modifications of this License.) \r\n\r\n\r\n      6.4 Origin of the Initial Developer's Public License. The Initial Developer's \r\n      Public License is based on the Mozilla Public License V 1.1 with the following \r\n      changes: \r\n\r\n         1) The license is published by the Initial Developer of this code. Only the \r\n         Initial Developer can modify the terms applicable to Covered Code. \r\n\r\n         2) The license can be modified and used for code which is not already \r\n         governed by this license. Modified versions of the license must be \r\n         renamed to avoid confusion with Netscape's license Initial Developer's's \r\n         license and must include a description of changes from the Initial \r\n         Developer's Public License. \r\n\r\n         3) The name of the license in Exhibit A is the \"Initial Developer's Public \r\n         License\".\r\n\r\n         4) The reference to an alternative license in Exhibit A has been removed\r\n\r\n         . \r\n         5) Amendments I, II, III, V, and VI have been deleted.\r\n\r\n         6) Exhibit A, Netscape Public License has been deleted\r\n\r\n\r\n   7. DISCLAIMER OF WARRANTY.\r\n\r\n    \r\n\r\n   COVERED CODE IS PROVIDED UNDER THIS LICENSE ON AN \"AS IS'' BASIS, WITHOUT \r\n   WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, WITHOUT \r\n   LIMITATION, WARRANTIES THAT THE COVERED CODE IS FREE OF DEFECTS, \r\n   MERCHANTABLE, FIT FOR A PARTICULAR PURPOSE OR NON-INFRINGING. THE \r\n   ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE COVERED CODE IS \r\n   WITH YOU. SHOULD ANY COVERED CODE PROVE DEFECTIVE IN ANY RESPECT, \r\n   YOU (NOT THE INITIAL DEVELOPER OR ANY OTHER CONTRIBUTOR) ASSUME THE \r\n   COST OF ANY NECESSARY SERVICING, REPAIR OR CORRECTION. THIS DISCLAIMER \r\n   OF WARRANTY CONSTITUTES AN ESSENTIAL PART OF THIS LICENSE. NO USE OF \r\n   ANY COVERED CODE IS AUTHORIZED HEREUNDER EXCEPT UNDER THIS \r\n   DISCLAIMER. \r\n\r\n\r\n   8. TERMINATION.\r\n\r\n    \r\n      8.1. This License and the rights granted hereunder will terminate automatically \r\n      if You fail to comply with terms herein and fail to cure such breach within 30 \r\n      days of becoming aware of the breach. All sublicenses to the Covered Code \r\n      which are properly granted shall survive any termination of this License. \r\n      Provisions which, by their nature, must remain in effect beyond the termination \r\n      of this License shall survive. \r\n\r\n      8.2. If You initiate litigation by asserting a patent infringement claim (excluding \r\n      declatory judgment actions) against Initial Developer or a Contributor (the Initial \r\n      Developer or Contributor against whom You file such action is referred to as \r\n      \"Participant\") alleging that:\r\n\r\n         (a) such Participant's Contributor Version directly or indirectly infringes \r\n         any patent, then any and all rights granted by such Participant to You \r\n         under Sections 2.1 and/or 2.2 of this License shall, upon 60 days notice \r\n         from Participant terminate prospectively, unless if within 60 days after \r\n         receipt of notice You either:\r\n\r\n            (i) agree in writing to pay Participant a mutually agreeable \r\n            reasonable royalty for Your past and future use of Modifications \r\n            made by such Participant, or \r\n\r\n            (ii) withdraw Your litigation claim with respect to the Contributor \r\n            Version against such Participant. \r\n\r\n\r\n         If within 60 days of notice, a reasonable royalty and payment \r\n         arrangement are not mutually agreed upon in writing by the parties or \r\n         the litigation claim is not withdrawn, the rights granted by Participant to \r\n         You under Sections 2.1 and/or 2.2 automatically terminate at the \r\n         expiration of the 60 day notice period specified above. \r\n\r\n         (b) any software, hardware, or device, other than such Participant's \r\n         Contributor Version, directly or indirectly infringes any patent, then any \r\n         rights granted to You by such Participant under Sections 2.1(b) and \r\n         2.2(b) are revoked effective as of the date You first made, used, sold, \r\n         distributed, or had made, Modifications made by that Participant. \r\n\r\n      8.3. If You assert a patent infringement claim against Participant alleging that \r\n      such Participant's Contributor Version directly or indirectly infringes any patent \r\n      where such claim is resolved (such as by license or settlement) prior to the \r\n      initiation of patent infringement litigation, then the reasonable value of the \r\n      licenses granted by such Participant under Sections 2.1 or 2.2 shall be taken \r\n      into account in determining the amount or value of any payment or license. \r\n\r\n      8.4. In the event of termination under Sections 8.1 or 8.2 above, all end user \r\n      license agreements (excluding distributors and resellers) which have been \r\n      validly granted by You or any distributor hereunder prior to termination shall \r\n      survive termination. \r\n\r\n\r\n   9. LIMITATION OF LIABILITY.\r\n\r\n\r\n   UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY, WHETHER TORT \r\n   (INCLUDING NEGLIGENCE), CONTRACT, OR OTHERWISE, SHALL YOU, THE INITIAL \r\n   DEVELOPER, ANY OTHER CONTRIBUTOR, OR ANY DISTRIBUTOR OF COVERED \r\n   CODE, OR ANY SUPPLIER OF ANY OF SUCH PARTIES, BE LIABLE TO ANY PERSON \r\n   FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY \r\n   CHARACTER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF \r\n   GOODWILL, WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, OR ANY \r\n   AND ALL OTHER COMMERCIAL DAMAGES OR LOSSES, EVEN IF SUCH PARTY \r\n   SHALL HAVE BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. THIS \r\n   LIMITATION OF LIABILITY SHALL NOT APPLY TO LIABILITY FOR DEATH OR \r\n   PERSONAL INJURY RESULTING FROM SUCH PARTY'S NEGLIGENCE TO THE EXTENT \r\n   APPLICABLE LAW PROHIBITS SUCH LIMITATION. SOME JURISDICTIONS DO NOT \r\n   ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL \r\n   DAMAGES, SO THIS EXCLUSION AND LIMITATION MAY NOT APPLY TO YOU. \r\n\r\n\r\n   10. U.S. GOVERNMENT END USERS.\r\n\r\n\r\n   The Covered Code is a ''commercial item,'' as that term is defined in 48 C.F.R. 2.101 \r\n   (Oct. 1995), consisting of ''commercial computer software'' and ''commercial computer \r\n   software documentation,'' as such terms are used in 48 C.F.R. 12.212 (Sept. 1995). \r\n   Consistent with 48 C.F.R. 12.212 and 48 C.F.R. 227.7202-1 through 227.7202-4 (June \r\n   1995), all U.S. Government End Users acquire Covered Code with only those rights \r\n   set forth herein. \r\n\r\n\r\n   11. MISCELLANEOUS.\r\n\r\n\r\n   This License represents the complete agreement concerning subject matter hereof. If \r\n   any provision of this License is held to be unenforceable, such provision shall be \r\n   reformed only to the extent necessary to make it enforceable. This License shall be \r\n   governed by California law provisions (except to the extent applicable law, if any, \r\n   provides otherwise), excluding its conflict-of-law provisions. With respect to disputes \r\n   in which at least one party is a citizen of, or an entity chartered or registered to do \r\n   business in the United States of America, any litigation relating to this License shall be \r\n   subject to the jurisdiction of the Federal Courts of the Northern District of California, \r\n   with venue lying in Santa Clara County, California, with the losing party responsible for \r\n   costs, including without limitation, court costs and reasonable attorneys' fees and \r\n   expenses. The application of the United Nations Convention on Contracts for the \r\n   International Sale of Goods is expressly excluded. Any law or regulation which \r\n   provides that the language of a contract shall be construed against the drafter shall \r\n   not apply to this License. \r\n\r\n\r\n   12. RESPONSIBILITY FOR CLAIMS.\r\n\r\n\r\n   As between Initial Developer and the Contributors, each party is responsible for claims \r\n   and damages arising, directly or indirectly, out of its utilization of rights under this \r\n   License and You agree to work with Initial Developer and Contributors to distribute \r\n   such responsibility on an equitable basis. Nothing herein is intended or shall be \r\n   deemed to constitute any admission of liability. \r\n\r\n\r\n   13. MULTIPLE-LICENSED CODE.\r\n\r\n\r\n   Initial Developer may designate portions of the Covered Code as \"Multiple-Licensed\". \r\n   \"Multiple-Licensed\" means that the Initial Devpoeloper permits you to utilize portions of \r\n   the Covered Code under Your choice of the IDPL or the alternative licenses, if any, \r\n   specified by the Initial Developer in the file described in Exhibit A. \r\n\r\n   EXHIBIT A -Initial Developer's Public License.\r\n\r\n   The contents of this file are subject to the Initial Developer's Public License Version 1.0 \r\n   (the \"License\"); you may not use this file except in compliance with the License. You \r\n   may obtain a copy of the License at http://www.ibphoenix.com/idpl.html Software \r\n   distributed under the License is distributed on an \"AS IS\" basis, WITHOUT WARRANTY \r\n   OF ANY KIND, either express or implied. See the License for the specific language \r\n   governing rights and limitations under the License.\r\n\r\n   The Original Code is ______________________________________. \r\n\r\n   The Initial Developer of the Original Code is ________________________.\r\n\r\n   Portions created by ______________________ are Copyright (C) ______ \r\n   _______________________.\r\n\r\n   All Rights Reserved.\r\n\r\n   Contributor(s): ______________________________________.",
            "name": "Initial Developer's Public License 1.0"
        }
    ]
}
