{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "cryptin-cli-linux-x64-sbom",
  "documentNamespace": "https://cryptin.lake8.dev/sbom/cryptin-cli-linux-x64-sbom.json",
  "documentDescribes": [
    "SPDXRef-cryptin-cli-linux-x64"
  ],
  "creationInfo": {
    "created": "2026-08-06T00:00:00Z",
    "creators": [
      "Tool: scripts/make-sbom-cli.py",
      "Organization: lake8.dev"
    ],
    "comment": "Generata dal .deps.json di un publish self-contained per .NETCoreApp,Version=v9.0/linux-x64. Elenca solo i pacchetti che portano almeno un file nell'artefatto: le dipendenze risolte per altri RID sono escluse di proposito."
  },
  "packages": [
    {
      "SPDXID": "SPDXRef-cryptin-cli-linux-x64",
      "name": "cryptin",
      "versionInfo": "1.0.0",
      "downloadLocation": "https://cryptin.lake8.dev/download",
      "filesAnalyzed": false,
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "Copyright 2026 lake8.dev",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bb48dbbd63cc8596ceacb55380a71f3ea8674df18b66526e6bc5a8bc387a0e67"
        }
      ],
      "comment": "Publish self-contained single-file per linux-x64, 71,626,392 byte. Il runtime .NET viaggia dentro l'eseguibile, quindi i componenti Microsoft elencati qui sotto sono parte di cio' che il cliente riceve, non prerequisiti da installare."
    },
    {
      "SPDXID": "SPDXRef-CryptinSDK",
      "name": "CryptinSDK",
      "versionInfo": "1.0.0",
      "downloadLocation": "https://github.com/jaffa2970/Krypt",
      "filesAnalyzed": false,
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "Copyright 2026 lake8.dev",
      "comment": "Componente di prima parte, compilato da questo repository."
    },
    {
      "SPDXID": "SPDXRef-HidSharp-2.6.4",
      "name": "HidSharp",
      "versionInfo": "2.6.4",
      "downloadLocation": "https://www.nuget.org/packages/HidSharp/2.6.4",
      "filesAnalyzed": false,
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "Copyright 2010-2025 James F. Bellinger",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/HidSharp@2.6.4"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-System.IO.Ports-9.0.0",
      "name": "System.IO.Ports",
      "versionInfo": "9.0.0",
      "downloadLocation": "https://www.nuget.org/packages/System.IO.Ports/9.0.0",
      "filesAnalyzed": false,
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright Microsoft",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/System.IO.Ports@9.0.0"
        }
      ],
      "sourceInfo": "https://github.com/dotnet/runtime @ 9d5a6a9aa463d6d10b0b0ba6d5982cc82f363dc3"
    },
    {
      "SPDXID": "SPDXRef-runtime.linux-x64.runtime.native.System.IO.Ports-9.0.0",
      "name": "runtime.linux-x64.runtime.native.System.IO.Ports",
      "versionInfo": "9.0.0",
      "downloadLocation": "https://www.nuget.org/packages/runtime.linux-x64.runtime.native.System.IO.Ports/9.0.0",
      "filesAnalyzed": false,
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright Microsoft",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/runtime.linux-x64.runtime.native.System.IO.Ports@9.0.0"
        }
      ],
      "sourceInfo": "https://github.com/dotnet/runtime @ 9d5a6a9aa463d6d10b0b0ba6d5982cc82f363dc3"
    },
    {
      "SPDXID": "SPDXRef-runtimepack.Microsoft.NETCore.App.Runtime.linux-x64-9.0.10",
      "name": "runtimepack.Microsoft.NETCore.App.Runtime.linux-x64",
      "versionInfo": "9.0.10",
      "downloadLocation": "https://dot.net/",
      "filesAnalyzed": false,
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright Microsoft",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/runtimepack.Microsoft.NETCore.App.Runtime.linux-x64@9.0.10"
        }
      ],
      "comment": "Il runtime .NET, incluso nell'eseguibile: 184 file. E' il componente da sorvegliare per i CVE .NET — la versione che conta e' questa, non il TargetFramework net9.0.",
      "sourceInfo": "https://github.com/dotnet/runtime @ e1f19886fe3354963a4a790c896b3f99689fd7a5"
    },
    {
      "SPDXID": "SPDXRef-ext-libudev",
      "name": "libudev",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://github.com/systemd/systemd",
      "filesAnalyzed": false,
      "licenseConcluded": "LGPL-2.1-or-later",
      "licenseDeclared": "LGPL-2.1-or-later",
      "copyrightText": "NOASSERTION",
      "comment": "Dipendenza di runtime di HidSharp per enumerare hidraw. NON inclusa nel pacchetto: va fornita dal sistema (`libudev1` su Debian/Ubuntu, presente di default). Senza, la CLI non trova nessun dongle."
    },
    {
      "SPDXID": "SPDXRef-ext-openssl",
      "name": "OpenSSL",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://www.openssl.org/",
      "filesAnalyzed": false,
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "NOASSERTION",
      "comment": "Usata da .NET per TLS verso license.lake8.dev. Il file incluso libSystem.Security.Cryptography.Native.OpenSsl.so e' lo shim di interoperabilita', non OpenSSL: la libreria vera e' quella di sistema."
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-cryptin-cli-linux-x64"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-linux-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-CryptinSDK"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-linux-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-HidSharp-2.6.4"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-linux-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-System.IO.Ports-9.0.0"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-linux-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-runtime.linux-x64.runtime.native.System.IO.Ports-9.0.0"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-linux-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-runtimepack.Microsoft.NETCore.App.Runtime.linux-x64-9.0.10"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-linux-x64",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-ext-libudev"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-linux-x64",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-ext-openssl"
    }
  ]
}