{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "cryptin-cli-win-x64-sbom",
  "documentNamespace": "https://cryptin.lake8.dev/sbom/cryptin-cli-win-x64-sbom.json",
  "documentDescribes": [
    "SPDXRef-cryptin-cli-win-x64"
  ],
  "creationInfo": {
    "created": "2026-08-06T00:00:00Z",
    "creators": [
      "Tool: scripts/make-sbom-cli.py",
      "Organization: lake8.dev"
    ],
    "comment": "Generata dal .deps.json di un publish self-contained per .NETCoreApp,Version=v9.0/win-x64. Elenca solo i pacchetti che portano almeno un file nell'artefatto: le dipendenze risolte per altri RID sono escluse di proposito."
  },
  "packages": [
    {
      "SPDXID": "SPDXRef-cryptin-cli-win-x64",
      "name": "cryptin",
      "versionInfo": "1.0.0",
      "downloadLocation": "https://cryptin.lake8.dev/download",
      "filesAnalyzed": false,
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "Copyright 2026 lake8.dev",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a81e964bff7164feebd6f8958918ce4459791b2e0c87271b7706f33bded26149"
        }
      ],
      "comment": "Publish self-contained single-file per win-x64, 71,414,615 byte. Il runtime .NET viaggia dentro l'eseguibile, quindi i componenti Microsoft elencati qui sotto sono parte di cio' che il cliente riceve, non prerequisiti da installare."
    },
    {
      "SPDXID": "SPDXRef-CryptinSDK",
      "name": "CryptinSDK",
      "versionInfo": "1.0.0",
      "downloadLocation": "https://github.com/jaffa2970/Krypt",
      "filesAnalyzed": false,
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "Copyright 2026 lake8.dev",
      "comment": "Componente di prima parte, compilato da questo repository."
    },
    {
      "SPDXID": "SPDXRef-HidSharp-2.6.4",
      "name": "HidSharp",
      "versionInfo": "2.6.4",
      "downloadLocation": "https://www.nuget.org/packages/HidSharp/2.6.4",
      "filesAnalyzed": false,
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "Copyright 2010-2025 James F. Bellinger",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/HidSharp@2.6.4"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-System.IO.Ports-9.0.0",
      "name": "System.IO.Ports",
      "versionInfo": "9.0.0",
      "downloadLocation": "https://www.nuget.org/packages/System.IO.Ports/9.0.0",
      "filesAnalyzed": false,
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright Microsoft",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/System.IO.Ports@9.0.0"
        }
      ],
      "sourceInfo": "https://github.com/dotnet/runtime @ 9d5a6a9aa463d6d10b0b0ba6d5982cc82f363dc3"
    },
    {
      "SPDXID": "SPDXRef-runtimepack.Microsoft.NETCore.App.Runtime.win-x64-9.0.10",
      "name": "runtimepack.Microsoft.NETCore.App.Runtime.win-x64",
      "versionInfo": "9.0.10",
      "downloadLocation": "https://dot.net/",
      "filesAnalyzed": false,
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright Microsoft",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/runtimepack.Microsoft.NETCore.App.Runtime.win-x64@9.0.10"
        }
      ],
      "comment": "Il runtime .NET, incluso nell'eseguibile: 184 file. E' il componente da sorvegliare per i CVE .NET — la versione che conta e' questa, non il TargetFramework net9.0.",
      "sourceInfo": "https://github.com/dotnet/runtime @ e1f19886fe3354963a4a790c896b3f99689fd7a5"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-cryptin-cli-win-x64"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-win-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-CryptinSDK"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-win-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-HidSharp-2.6.4"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-win-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-System.IO.Ports-9.0.0"
    },
    {
      "spdxElementId": "SPDXRef-cryptin-cli-win-x64",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-runtimepack.Microsoft.NETCore.App.Runtime.win-x64-9.0.10"
    }
  ]
}