{"$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:9abeb672-c53b-4116-ba32-7fc42ea21aac", "version": 1, "metadata": {"timestamp": "2026-10-26T21:51:10+01:00", "tools": {"components": [{"type": "application", "author": "anchore", "name": "syft", "version": "1.54.1"}]}, "component": {"bom-ref": "pkg:rpm/evalgo/laminar@1.4-1.evalgo1.el9?arch=x86_64", "type": "application", "name": "laminar", "version": "1.4-1.evalgo1.el9", "purl": "pkg:rpm/evalgo/laminar@1.4-1.evalgo1.el9?arch=x86_64", "licenses": [{"license": {"name": "GPL-3.0-or-later"}}], "hashes": [{"alg": "SHA-256", "content": "589aa193083cde794c338d241fdb371f2f65ebd01d55edc0de145ceebcc3e9c6"}], "properties": [{"name": "evalgo:repo", "value": "laminar/el/9"}]}, "properties": [{"name": "evalgo:sbom-source", "value": "syft over the unpacked RPM payload + ci/catalog/rpm-extra.json"}]}, "components": [{"bom-ref": "evalgo-extra:laminar@1.4", "type": "application", "name": "laminar", "version": "1.4", "purl": "pkg:github/ohwgiles/laminar@1.4", "properties": [{"name": "evalgo:note", "value": "upstream software packaged in laminar"}]}, {"bom-ref": "evalgo-extra:capnproto@1.5.0", "type": "library", "name": "capnproto", "version": "1.5.0", "purl": "pkg:github/capnproto/capnproto@v1.5.0", "properties": [{"name": "evalgo:note", "value": "statically linked (built from source, images/builder-laminar)"}], "cpe": "cpe:2.3:a:capnproto:capnproto:1.5.0:*:*:*:*:*:*:*"}, {"bom-ref": "evalgo-extra:rapidjson@1.1.0", "type": "library", "name": "rapidjson", "version": "1.1.0", "purl": "pkg:github/tencent/rapidjson@v1.1.0", "properties": [{"name": "evalgo:note", "value": "header-only, compiled in (built from source, images/builder-laminar)"}], "cpe": "cpe:2.3:a:tencent:rapidjson:1.1.0:*:*:*:*:*:*:*"}]}