sbom.json

{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:2d7fbf85-c8b6-4f90-9966-70da88224a36",
  "version": 4,
  "metadata": {
    "timestamp": "2026-04-15T06:08:18Z",
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:github/mongodb/mongo@master",
      "supplier": {
        "name": "MongoDB, Inc.",
        "url": [
          "https://mongodb.com"
        ]
      },
      "author": "MongoDB, Inc.",
      "publisher": "MongoDB, Inc.",
      "group": "mongodb",
      "name": "mongodb/mongo",
      "version": "master",
      "cpe": "cpe:2.3:a:mongodb:mongodb:master:*:*:*:*:*:*:*",
      "purl": "pkg:github/mongodb/mongo@master",
      "externalReferences": [
        {
          "url": "https://raw.githubusercontent.com/mongodb/mongo/refs/heads/master/LICENSE-Community.txt",
          "comment": "Server Side Public License 1.0",
          "type": "license"
        },
        {
          "url": "https://www.mongodb.com/products/self-managed/community-edition",
          "comment": "MongoDB Community Edition is self-managed and can be hosted locally or in the cloud.",
          "type": "website"
        },
        {
          "url": "https://www.mongodb.com/products/self-managed/enterprise-advanced",
          "comment": "MongoDB Enterprise Advanced has powerful tools for automation, operations, and security in self-managed environments.",
          "type": "website"
        },
        {
          "url": "https://www.mongodb.com/docs/manual/release-notes/",
          "type": "release-notes"
        },
        {
          "url": "https://github.com/mongodb/mongo",
          "type": "vcs"
        }
      ]
    },
    "supplier": {
      "name": "MongoDB, Inc.",
      "url": [
        "https://mongodb.com"
      ]
    },
    "tools": {
      "services": [
        {
          "name": "Endor Labs Inc",
          "version": "v1.7.870"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/firefox-esr@140.9.0esr-1?arch=source",
      "supplier": {
        "name": "Mozilla Corporation",
        "url": [
          "https://mozilla.org"
        ]
      },
      "author": "Mozilla Corporation",
      "group": "mozilla",
      "name": "Mozilla Firefox ESR",
      "version": "140.9.0esr",
      "description": "The C++-only SpiderMonkey component of FireFox ESR used by MongoDB.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "copyright": "Mozilla Corporation",
      "cpe": "cpe:2.3:a:mozilla:firefox:140.9.0:*:*:*:esr:*:*:*",
      "purl": "pkg:deb/debian/firefox-esr@140.9.0esr-1?arch=source",
      "externalReferences": [
        {
          "url": "https://github.com/mozilla-firefox/firefox.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/mozjs"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/mozjs/get-sources.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:generic/intel/IntelRDFPMathLib@2.0.1",
      "supplier": {
        "name": "Intel",
        "url": [
          "https://www.intel.com/content/www/us/en/developer/articles/tool/intel-decimal-floating-point-math-library.html"
        ],
        "contact": [
          {
            "email": "decimalfp@intel.com"
          }
        ]
      },
      "author": "Marius Cornea",
      "group": "intel",
      "name": "Intel\u00ae Decimal Floating-Point Math Library",
      "version": "2.0.1",
      "description": "A a software implementation of the IEEE Standard 754-2019 Decimal Floating-Point Arithmetic specification.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "copyright": "Copyright (c) 2011, Intel Corp.",
      "purl": "pkg:generic/intel/IntelRDFPMathLib@2.0.1",
      "externalReferences": [
        {
          "url": "https://www.netlib.org/misc/intel/",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/IntelRDFPMathLib20U1"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "data",
      "bom-ref": "pkg:generic/unicode-org/unicode@8.0.0",
      "supplier": {
        "name": "Unicode, Inc.",
        "url": [
          "http://www.unicode.org/"
        ]
      },
      "author": "Unicode, Inc.",
      "group": "unicode-org",
      "name": "Unicode Character Database",
      "version": "8.0.0",
      "description": "Unicode Data Files",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Unicode-DFS-2016"
          }
        }
      ],
      "copyright": "Copyright \u00a9 1991\u20132015 Unicode, Inc",
      "purl": "pkg:generic/unicode-org/unicode@8.0.0?repository_url=https%3A%2F%2Fwww.unicode.org%2FPublic%2F8.0.0%2F",
      "externalReferences": [
        {
          "url": "https://www.unicode.org/Public/8.0.0/",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/unicode-8.0.0"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:generic/valgrind/valgrind@093bef43d69236287ccc748591c9560a71181b0a",
      "author": "The Valgrind Developers",
      "group": "valgrind",
      "name": "valgrind.h",
      "version": "093bef43d69236287ccc748591c9560a71181b0a",
      "description": "This header file is part of Valgrind, a dynamic binary instrumentation framework.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        }
      ],
      "copyright": "Copyright (C) 2000-2017 Julian Seward. All rights reserved.",
      "purl": "pkg:generic/valgrind/valgrind@093bef43d69236287ccc748591c9560a71181b0a?vcs_url=https%3A%2F%2Fsourceware.org%2Fgit%2F%3Fp%3Dvalgrind.git",
      "externalReferences": [
        {
          "url": "https://sourceware.org/git/valgrind.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/valgrind"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/aappleby/smhasher@a6bd3ce7be8ad147ea820a7cf6229a975c0c96bb",
      "author": "Austin Appleby",
      "group": "aappleby",
      "name": "MurmurHash3",
      "version": "a6bd3ce7be8ad147ea820a7cf6229a975c0c96bb",
      "description": "MurmurHash is a non-cryptographic hash function suitable for general hash-based lookup.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "copyright": "MurmurHash3 was written by Austin Appleby, and is placed in the public domain. The author hereby disclaims copyright to this source code.",
      "purl": "pkg:github/aappleby/smhasher@a6bd3ce7be8ad147ea820a7cf6229a975c0c96bb",
      "externalReferences": [
        {
          "url": "https://github.com/aappleby/smhasher/blob/a6bd3ce/",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/murmurhash3"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/abseil/abseil-cpp@20250512.1",
      "supplier": {
        "name": "Abseil",
        "url": [
          "https://abseil.io/"
        ]
      },
      "author": "The Abseil Authors",
      "group": "google.opensource",
      "name": "Abseil Common Libraries (C++)",
      "version": "20250512.1",
      "description": "Abseil is an open-source collection of C++ code (compliant to C++17) designed to augment the C++ standard library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright 2023 The Abseil Authors.",
      "purl": "pkg:github/abseil/abseil-cpp@20250512.1",
      "externalReferences": [
        {
          "url": "https://github.com/abseil/abseil-cpp.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/abseil-cpp"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/abseil-cpp/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/antirez/linenoise@6cdc775807e57b2c3fd64bd207814f8ee1fe35f3",
      "author": "Salvatore Sanfilippo",
      "group": "antirez",
      "name": "linenoise",
      "version": "6cdc775807e57b2c3fd64bd207814f8ee1fe35f3",
      "description": "A small self-contained alternative to readline and libedit",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "copyright": "Copyright (c) 2010-2014, Salvatore Sanfilippo <antirez at gmail dot com>. Copyright (c) 2010-2013, Pieter Noordhuis <pcnoordhuis at gmail dot com>. All rights reserved.",
      "purl": "pkg:github/antirez/linenoise@6cdc775807e57b2c3fd64bd207814f8ee1fe35f3",
      "externalReferences": [
        {
          "url": "https://github.com/antirez/linenoise",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/mongo/shell/linenoise.h"
          },
          {
            "location": "src/mongo/shell/linenoise.cpp"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/arximboldi/immer@v0.9.1",
      "supplier": {
        "name": "sinusoidal engineering"
      },
      "author": "Juanpe Bol\u00edvar",
      "group": "arximboldi",
      "name": "immer",
      "version": "0.9.1",
      "description": "Postmodern immutable and persistent data structures for C++ \u2014 value semantics at scale",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSL-1.0"
          }
        }
      ],
      "copyright": "Copyright (C) 2016, 2017, 2018 Juan Pedro Bolivar Puente",
      "purl": "pkg:github/arximboldi/immer@v0.9.1",
      "externalReferences": [
        {
          "url": "https://github.com/arximboldi/immer.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/immer"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/boostorg/boost@boost-1.88.0",
      "supplier": {
        "name": "The Boost Foundation",
        "url": [
          "https://www.boost.org/"
        ]
      },
      "author": "Boost Developers",
      "group": "boost",
      "name": "Boost C++ Libraries",
      "version": "1.88.0",
      "description": "Super-project for modularized Boost. Boost is a repository of free, portable, peer-reviewed C++ libraries. It acts as a proving ground for new libraries, particularly those which work well with the ISO C++ Standard Library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSL-1.0"
          }
        }
      ],
      "copyright": "Boost copyright claims are made on a per-file basis and listed as comments in source file headers",
      "cpe": "cpe:2.3:a:boost:boost:1.88.0:*:*:*:*:*:*:*",
      "purl": "pkg:github/boostorg/boost@boost-1.88.0",
      "externalReferences": [
        {
          "url": "https://github.com/boostorg/boost.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/boost"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/boost/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/c-ares/c-ares@cares-1_27_0",
      "supplier": {
        "name": "The c-ares Project",
        "url": [
          "https://c-ares.org/"
        ]
      },
      "author": "Daniel Stenberg",
      "group": "c-ares",
      "name": "c-ares",
      "version": "1.27.0",
      "description": "A C library for asynchronous DNS requests",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2007 - 2023 Daniel Stenberg with many contributors, see AUTHORS file.",
      "cpe": "cpe:2.3:a:c-ares:c-ares:1.27.0:*:*:*:*:*:*:*",
      "purl": "pkg:github/c-ares/c-ares@cares-1_27_0",
      "externalReferences": [
        {
          "url": "https://github.com/c-ares/c-ares.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/cares"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/cares/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/chriskohlhoff/asio@asio-1-34-2",
      "author": "Christopher M. Kohlhoff",
      "group": "chriskohlhoff",
      "name": "Asio C++ Library",
      "version": "1.34.2",
      "description": "Asio is a cross-platform C++ library for network and low-level I/O programming that provides developers with a consistent asynchronous model using a modern C++ approach.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSL-1.0"
          }
        }
      ],
      "copyright": "Copyright \u00a9 2003-2025 Christopher M. Kohlhoff",
      "purl": "pkg:github/chriskohlhoff/asio@asio-1-34-2",
      "externalReferences": [
        {
          "url": "https://github.com/chriskohlhoff/asio.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/asio"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/asio/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/cyrusimap/cyrus-sasl@cyrus-sasl-2.1.28",
      "supplier": {
        "name": "The Cyrus Project",
        "url": [
          "https://www.cyrusimap.org/overview/who_is_cyrus.html",
          "https://www.cyrusimap.org/sasl/"
        ]
      },
      "author": "The Cyrus Team",
      "group": "cyrus",
      "name": "Cyrus SASL",
      "version": "2.1.28",
      "description": "Simple Authentication and Security Layer (SASL) is a specification that describes how authentication mechanisms can be plugged into an application protocol on the wire. Cyrus SASL is an implementation of SASL that makes it easy for application developers to integrate authentication mechanisms into their application in a generic way.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-Attribution-HPND-disclaimer"
          }
        }
      ],
      "copyright": "Copyright (c) 1998-2003 Carnegie Mellon University. All rights reserved.",
      "cpe": "cpe:2.3:a:cyrus:sasl:2.1.28:*:*:*:*:*:*:*",
      "purl": "pkg:github/cyrusimap/cyrus-sasl@cyrus-sasl-2.1.28",
      "externalReferences": [
        {
          "url": "https://github.com/cyrusimap/cyrus-sasl.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/sasl"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/davea42/libdwarf-code@libdwarf-2.1.0",
      "author": "David Anderson",
      "group": "davea42",
      "name": "libdwarf",
      "version": "2.1.0",
      "description": "A library for reading DWARF2 and later DWARF data.",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "copyright": "Copyright 2000,2004 Silicon Graphics, Inc.; Portions Copyright 2002-2010 Sun Microsystems, Inc.; Portions Copyright 2007-2025 David Anderson.; Portions Copyright 2008-2010 Arxan Technologies, Inc.; Portions Copyright 2010-2012 SN Systems Ltd.; Portions Copyright 2015,2020 Google, Inc.; All Rights Reserved.",
      "cpe": "cpe:2.3:a:libdwarf_project:libdwarf:2.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:github/davea42/libdwarf-code@libdwarf-2.1.0",
      "externalReferences": [
        {
          "url": "https://github.com/davea42/libdwarf-code.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/libdwarf"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/libdwarf/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/dcleblanc/safeint@3.0.28a",
      "author": "David LeBlanc",
      "group": "dcleblanc",
      "name": "SafeInt",
      "version": "3.0.28a",
      "description": "SafeInt is a class library for C++ that manages integer overflows.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright David LeBlanc - dcl@dleblanc.net",
      "purl": "pkg:github/dcleblanc/safeint@3.0.28a",
      "externalReferences": [
        {
          "url": "https://github.com/dcleblanc/safeint.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/SafeInt"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/SafeInt/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/derickr/timelib@2022.13",
      "author": "Derick Rethans",
      "group": "derickr",
      "name": "timelib",
      "version": "2022.13",
      "description": "Timelib is a timezone and date/time library that can calculate local time, convert between timezones and parse textual descriptions of date/time information.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2015-2021 Derick Rethans, Copyright (c) 2017-2019,2021 MongoDB, Inc.",
      "purl": "pkg:github/derickr/timelib@2022.13",
      "externalReferences": [
        {
          "url": "https://github.com/derickr/timelib.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/timelib"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/timelib/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/facebook/folly@v2023.12.25.00",
      "supplier": {
        "name": "Meta Open Source",
        "url": [
          "https://opensource.fb.com/"
        ]
      },
      "author": "Meta",
      "group": "facebook",
      "name": "folly",
      "version": "2023.12.25.00",
      "description": "An open-source C++ library developed and used at Facebook.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright (c) Meta Platforms, Inc. and affiliates.",
      "cpe": "cpe:2.3:a:facebook:folly:2023.12.25.00:*:*:*:*:*:*:*",
      "purl": "pkg:github/facebook/folly@v2023.12.25.00",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/folly.git",
          "type": "vcs"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/folly"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/folly/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/facebook/zstd@v1.5.5",
      "supplier": {
        "name": "Meta Open Source",
        "url": [
          "https://opensource.fb.com/"
        ]
      },
      "author": "Meta Platforms, Inc.",
      "group": "facebook",
      "name": "Zstandard (zstd)",
      "version": "1.5.5",
      "description": "Zstandard - Fast real-time compression algorithm",
      "scope": "required",
      "licenses": [
        {
          "expression": "BSD-3-Clause OR GPL-2.0-only"
        }
      ],
      "copyright": "Copyright (c) Meta Platforms, Inc. and affiliates. All rights reserved.",
      "cpe": "cpe:2.3:a:facebook:zstandard:1.5.5:*:*:*:*:*:*:*",
      "purl": "pkg:github/facebook/zstd@v1.5.5",
      "externalReferences": [
        {
          "url": "https://github.com/facebook/zstd.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/zstandard"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/scripts/zstandard_get_sources.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/fmtlib/fmt@11.2.0",
      "supplier": {
        "name": "fmt.dev",
        "url": [
          "https://fmt.dev/"
        ]
      },
      "author": "Victor Zverovich",
      "group": "fmtlib",
      "name": "fmt",
      "version": "11.2.0",
      "description": "A modern formatting library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2012 - present, Victor Zverovich and {fmt} contributors",
      "cpe": "cpe:2.3:a:fmt:fmt:11.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:github/fmtlib/fmt@11.2.0",
      "externalReferences": [
        {
          "url": "https://github.com/fmtlib/fmt.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/fmt"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/fmt/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/google/benchmark@v1.5.2",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://opensource.google/"
        ]
      },
      "author": "Google LLC",
      "group": "google.opensource",
      "name": "benchmark",
      "version": "1.5.2",
      "description": "A microbenchmark support library",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright 2015 Google Inc. All rights reserved.",
      "purl": "pkg:github/google/benchmark@v1.5.2",
      "externalReferences": [
        {
          "url": "https://github.com/google/benchmark.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/benchmark"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/benchmark/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/google/fuzztest@2025-07-28",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://opensource.google/"
        ]
      },
      "author": "The Google Test and Google Mock Communities",
      "group": "google.opensource",
      "name": "fuzztest",
      "version": "2025-07-28",
      "description": "FuzzTest",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "HPND"
          }
        }
      ],
      "copyright": "Copyright 2008, Google Inc. All rights reserved.",
      "cpe": "cpe:2.3:a:google:fuzztest:2025-07-28:*:*:*:*:*:*:*",
      "purl": "pkg:github/google/fuzztest@2025-07-28",
      "externalReferences": [
        {
          "url": "https://github.com/google/fuzztest.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/fuzztest"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/fuzztest/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/google/googletest@v1.17.0",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://opensource.google/"
        ]
      },
      "author": "The Google Test and Google Mock Communities",
      "group": "google.opensource",
      "name": "googletest",
      "version": "1.17.0",
      "description": "GoogleTest - Google Testing and Mocking Framework",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "copyright": "Copyright 2008, Google Inc. All rights reserved.",
      "cpe": "cpe:2.3:a:google:google_test:1.17.0:*:*:*:*:*:*:*",
      "purl": "pkg:github/google/googletest@v1.17.0",
      "externalReferences": [
        {
          "url": "https://github.com/google/googletest.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/googletest"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/googletest/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/google/re2@2025-08-05",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://opensource.google/"
        ]
      },
      "author": "The RE2 Authors",
      "group": "google.opensource",
      "name": "re2",
      "version": "2025-08-05",
      "description": "RE2 is a fast, safe, thread-friendly alternative to backtracking regular expression engines like those used in PCRE, Perl, and Python. It is a C++ library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "copyright": "Copyright (c) 2009 The RE2 Authors. All rights reserved.",
      "cpe": "cpe:2.3:h:google:re2:2025-08-05:*:*:*:*:*:*:*",
      "purl": "pkg:github/google/re2@2025-08-05",
      "externalReferences": [
        {
          "url": "https://github.com/google/re2.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/re2"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/re2/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/google/s2geometry@a25c502bda9d7e0274b9e2b7825fbddf13cc0306",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "http://s2geometry.io/"
        ]
      },
      "author": "S2Geometry",
      "group": "google.opensource",
      "name": "S2 Geometry Library",
      "version": "a25c502bda9d7e0274b9e2b7825fbddf13cc0306",
      "description": "Computational geometry and spatial indexing on the sphere",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright 2005 Google Inc. All Rights Reserved.",
      "purl": "pkg:github/google/s2geometry@a25c502bda9d7e0274b9e2b7825fbddf13cc0306",
      "externalReferences": [
        {
          "url": "https://github.com/google/s2geometry.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/s2"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/google/snappy@1.1.10",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://opensource.google/"
        ]
      },
      "author": "Snappy Project",
      "group": "google.opensource",
      "name": "snappy",
      "version": "1.1.10",
      "description": "A fast compressor/decompressor",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "copyright": "Copyright 2011, Google Inc. All rights reserved.",
      "cpe": "cpe:2.3:a:google:snappy:1.1.10:*:*:*:*:*:*:*",
      "purl": "pkg:github/google/snappy@1.1.10",
      "externalReferences": [
        {
          "url": "https://github.com/google/tcmalloc.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/snappy"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/snappy/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/google/tcmalloc@f3b20f9a07e175c5d897df7b49d9830d4efa6110",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://opensource.google/"
        ]
      },
      "author": "Google LLC",
      "group": "google.opensource",
      "name": "tcmalloc",
      "version": "f3b20f9a07e175c5d897df7b49d9830d4efa6110",
      "description": "TCMalloc is Google's customized implementation of C's malloc() and C++'s operator new used for memory allocation within our C and C++ code. TCMalloc is a fast, multi-threaded malloc implementation.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright 2024 The TCMalloc Authors",
      "purl": "pkg:github/google/tcmalloc@f3b20f9a07e175c5d897df7b49d9830d4efa6110",
      "pedigree": {
        "descendants": [
          {
            "type": "library",
            "bom-ref": "pkg:github/mongodb-forks/tcmalloc@20230227-snapshot-093ba93c",
            "group": "google.opensource",
            "name": "tcmalloc",
            "version": "20230227-snapshot-093ba93c",
            "licenses": [
              {
                "license": {
                  "id": "Apache-2.0"
                }
              }
            ],
            "purl": "pkg:github/mongodb-forks/tcmalloc@20230227-snapshot-093ba93c"
          }
        ]
      },
      "externalReferences": [
        {
          "url": "https://github.com/google/tcmalloc.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/tcmalloc"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/tcmalloc/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/gperftools/gperftools@2.9.1",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://opensource.google/"
        ]
      },
      "author": "gpertools Project",
      "group": "google.opensource",
      "name": "gperftools",
      "version": "2.9.1",
      "description": "gperftools (originally Google Performance Tools) is a collection of a high-performance multi-threaded malloc() implementation, plus some pretty nifty performance analysis tools.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "copyright": "Copyright (c) 2005, Google Inc. All rights reserved.",
      "cpe": "cpe:2.3:a:gperftools_project:gperftools:2.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:github/gperftools/gperftools@2.9.1",
      "externalReferences": [
        {
          "url": "https://github.com/gperftools/gperftools.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/gperftools"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/gperftools/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/grpc/grpc@v1.74.1",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://opensource.google/"
        ]
      },
      "author": "gRPC authors",
      "group": "google.opensource",
      "name": "gRPC (C++)",
      "version": "1.74.1",
      "description": "gRPC is a modern, open source, high-performance remote procedure call (RPC) framework that can run anywhere. gRPC enables client and server applications to communicate transparently, and simplifies the building of connected systems.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright 2015 gRPC authors",
      "cpe": "cpe:2.3:a:grpc:grpc:1.74.1:*:*:*:*:*:*:*",
      "purl": "pkg:github/grpc/grpc@v1.74.1",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/grpc"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/grpc/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/jbeder/yaml-cpp@yaml-cpp-0.6.3",
      "author": "Jesse Beder",
      "group": "jbeder",
      "name": "yaml-cpp",
      "version": "0.6.3",
      "description": "A YAML parser and emitter in C++",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2008-2015 Jesse Beder.",
      "cpe": "cpe:2.3:a:yaml-cpp_project:yaml-cpp:0.6.3:*:*:*:*:*:*:*",
      "purl": "pkg:github/jbeder/yaml-cpp@yaml-cpp-0.6.3",
      "externalReferences": [
        {
          "url": "https://github.com/jbeder/yaml-cpp.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/yaml-cpp"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/scripts/yaml-cpp_get_sources.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/jeremy-rifkin/cpptrace@v1.0.3",
      "author": "Jeremy Rifkin",
      "group": "jeremy-rifkin",
      "name": "cpptrace",
      "version": "1.0.3",
      "description": "Simple, portable, and self-contained stacktrace library for C++11 and newer",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2023-2025 Jeremy Rifkin",
      "purl": "pkg:github/jeremy-rifkin/cpptrace@v1.0.3",
      "externalReferences": [
        {
          "url": "https://github.com/jeremy-rifkin/cpptrace.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/cpptrace"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/cpptrace/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/json-c/json-c@0.17",
      "supplier": {
        "name": "json-c project",
        "url": [
          "https://github.com/json-c/json-c"
        ]
      },
      "author": "Eric Haszlakiewicz",
      "group": "json-c",
      "name": "json-c",
      "version": "0.17",
      "description": "A JSON implementation in C.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2009-2012 Eric Haszlakiewicz; Copyright (c) 2004, 2005 Metaparadigm Pte Ltd",
      "purl": "pkg:github/json-c/json-c@0.17",
      "externalReferences": [
        {
          "url": "https://github.com/json-c/json-c",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/json-c"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/json-c/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/json-schema-org/json-schema-test-suite@728066f9c5c258ba3b1804a22a5b998f2ec77ec0",
      "supplier": {
        "name": "JSON Schema",
        "url": [
          "https://json-schema.org/"
        ]
      },
      "author": "Julian Berman",
      "group": "jsonschema",
      "name": "JSON-Schema-Test-Suite",
      "version": "728066f9c5c258ba3b1804a22a5b998f2ec77ec0",
      "description": "A language agnostic test suite for the JSON Schema specifications",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2012 Julian Berman",
      "purl": "pkg:github/json-schema-org/json-schema-test-suite@728066f9c5c258ba3b1804a22a5b998f2ec77ec0",
      "externalReferences": [
        {
          "url": "https://github.com/json-schema-org/JSON-Schema-Test-Suite.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/JSON-Schema-Test-Suite"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/jupp0r/prometheus-cpp@v1.2.2",
      "author": "Jupp Mueller, Gregor Jasny",
      "group": "jupp0r",
      "name": "Prometheus Client Library for Modern C++",
      "version": "1.2.2",
      "description": "This library aims to enable Metrics-Driven Development for C++ services. It implements the Prometheus Data Model, a powerful abstraction on which to collect and expose metrics.",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2016-2021 Jupp Mueller, Copyright (c) 2017-2022 Gregor Jasny",
      "purl": "pkg:github/jupp0r/prometheus-cpp@v1.2.2",
      "externalReferences": [
        {
          "url": "https://github.com/jupp0r/prometheus-cpp.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/prometheus-cpp"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/libarchive/bzip2@bzip2-1.0.8",
      "supplier": {
        "name": "bzip2 project",
        "url": [
          "https://sourceware.org/bzip2/"
        ]
      },
      "author": "Julian Seward",
      "group": "libarchive",
      "name": "bzip2",
      "version": "1.0.8",
      "description": "A high-quality data compression program and library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "bzip2-1.0.6"
          }
        }
      ],
      "copyright": "Copyright (C) 1996-2010 Julian Seward <jseward@acm.org>; Copyright (C) 2019-2020 Federico Mena Quintero <federico@gnome.org>; Copyright (C) 2021 Micah Snyder.",
      "purl": "pkg:github/libarchive/bzip2@bzip2-1.0.8",
      "externalReferences": [
        {
          "url": "https://github.com/libarchive/bzip2",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/bzip2"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/bzip2/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/libtom/libtomcrypt@v1.18.2",
      "supplier": {
        "name": "LibTom Projects",
        "url": [
          "https://www.libtom.net/"
        ]
      },
      "author": "LibTom Projects",
      "group": "libtom",
      "name": "LibTomCrypt",
      "version": "1.18.2",
      "description": "LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Unlicense"
          }
        }
      ],
      "copyright": "Team libtom.",
      "cpe": "cpe:2.3:a:libtom:libtomcrypt:1.18.2:*:*:*:*:*:*:*",
      "purl": "pkg:github/libtom/libtomcrypt@v1.18.2",
      "externalReferences": [
        {
          "url": "https://github.com/libtom/libtomcrypt.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/tomcrypt-1.18.2"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/scripts/tomcrypt_get_sources.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/libunwind/libunwind@v1.8.1",
      "supplier": {
        "name": "The libunwind project",
        "url": [
          "https://www.nongnu.org/libunwind/"
        ]
      },
      "author": "The libunwind project",
      "group": "libunwind",
      "name": "libunwind",
      "version": "1.8.1",
      "description": "The primary goal of this project is to define a portable and efficient C programming interface (API) to determine the call-chain of a program. The API additionally provides the means to manipulate the preserved (callee-saved) state of each call-frame and to resume execution at any point in the call-chain (non-local goto). The API supports both local (same-process) and remote (across-process) operation.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (C) 2008 CodeSourcery, 2021 Loongson Technology Corporation Limited",
      "cpe": "cpe:2.3:a:libunwind_project:libunwind:1.8.1:*:*:*:*:*:*:*",
      "purl": "pkg:github/libunwind/libunwind@v1.8.1",
      "externalReferences": [
        {
          "url": "https://github.com/libunwind/libunwind.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/unwind"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/unwind/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/madler/zlib@1.3.2",
      "supplier": {
        "name": "zlib",
        "url": [
          "https://zlib.net/"
        ]
      },
      "author": "Jean-loup Gailly, Mark Adler",
      "group": "madler",
      "name": "zlib",
      "version": "1.3.2",
      "description": "zlib is a general purpose data compression library.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Zlib"
          }
        }
      ],
      "copyright": "Copyright \u00a9 1995-2024 Jean-loup Gailly and Mark Adler.",
      "cpe": "cpe:2.3:a:zlib:zlib:1.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:github/madler/zlib@1.3.2",
      "externalReferences": [
        {
          "url": "https://zlib.net/fossils/",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/zlib"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/scripts/zlib_get_sources.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/mongodb/libmongocrypt@1.15.0",
      "supplier": {
        "name": "MongoDB, Inc.",
        "url": [
          "https://mongodb.com"
        ]
      },
      "author": "MongoDB, Inc.",
      "group": "mongodb",
      "name": "libmongocrypt",
      "version": "1.15.0",
      "description": "Required C library for Client Side and Queryable Encryption in MongoDB",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright 2019-present MongoDB, Inc.",
      "cpe": "cpe:2.3:a:mongodb:libmongocrypt:1.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:github/mongodb/libmongocrypt@1.15.0",
      "externalReferences": [
        {
          "url": "https://github.com/mongodb/libmongocrypt.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/libmongocrypt"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/libmongocrypt/import.sh"
        },
        {
          "name": "mdb_first_party",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/mongodb/mongo-c-driver@1.28.1",
      "supplier": {
        "name": "MongoDB, Inc.",
        "url": [
          "https://mongodb.com"
        ]
      },
      "author": "MongoDB, Inc.",
      "group": "mongodb",
      "name": "MongoDB C Driver",
      "version": "1.28.1",
      "description": "The Official MongoDB driver for C language",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "2009-present, MongoDB, Inc.",
      "cpe": "cpe:2.3:a:mongodb:c_driver:1.28.1:*:*:*:*:*:*:*",
      "purl": "pkg:github/mongodb/mongo-c-driver@1.28.1",
      "externalReferences": [
        {
          "url": "https://github.com/mongodb/mongo-c-driver.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/libbson"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/libbson/import.sh"
        },
        {
          "name": "mdb_first_party",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/nlohmann/json@v3.11.3",
      "author": "Niels Lohmann",
      "group": "nlohmann",
      "name": "nlohmann/json",
      "version": "3.11.3",
      "description": "JSON for Modern C++",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2013-2022 Niels Lohmann <http://nlohmann.me>.",
      "purl": "pkg:github/nlohmann/json@v3.11.3",
      "externalReferences": [
        {
          "url": "https://github.com/nlohmann/json.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/nlohmann-json"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/nlohmann-json/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/nodejs/node@22.1.0?download_url=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fblob%2F8b45c5d26a829bcd3280401dbc1874bcd1302289%2Fsrc%2Fnode_i18n.cc%23L825%23src%2Fnode_i18n.cc%3AGetStringWidth#src/node_i18n.cc",
      "supplier": {
        "name": "OpenJS Foundation",
        "url": [
          "https://openjsf.org/"
        ]
      },
      "author": "OpenJS Foundation",
      "group": "nodejs",
      "name": "node",
      "version": "22.1.0",
      "description": "A modified version of the GetStringWidth function from Node.js, originating from the https://github.com/joyent/node repository.",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "copyright": "Copyright Joyent, Inc. and other Node contributors.",
      "purl": "pkg:github/nodejs/node@22.1.0?download_url=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fblob%2F8b45c5d26a829bcd3280401dbc1874bcd1302289%2Fsrc%2Fnode_i18n.cc%23L825%23src%2Fnode_i18n.cc%3AGetStringWidth#src/node_i18n.cc",
      "externalReferences": [
        {
          "url": "https://nodejs.org/",
          "type": "website"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/node"
          }
        ]
      },
      "properties": []
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/open-telemetry/opentelemetry-cpp@v1.24.0",
      "supplier": {
        "name": "OpenTelemetry",
        "url": [
          "https://opentelemetry.io/"
        ]
      },
      "author": "The OpenTelemetry Authors",
      "group": "open-telemetry",
      "name": "opentelemetry-cpp",
      "version": "1.24.0",
      "description": "OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. As an industry-standard, OpenTelemetry is supported by more than 40 observability vendors, integrated by many libraries, services, and apps, and adopted by numerous end users.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright The OpenTelemetry Authors",
      "purl": "pkg:github/open-telemetry/opentelemetry-cpp@v1.24.0",
      "externalReferences": [
        {
          "url": "https://github.com/open-telemetry/opentelemetry-cpp.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/opentelemetry-cpp"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/opentelemetry-cpp/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/open-telemetry/opentelemetry-proto@1.3.2",
      "supplier": {
        "name": "OpenTelemetry",
        "url": [
          "https://opentelemetry.io/"
        ]
      },
      "author": "The OpenTelemetry Authors",
      "group": "open-telemetry",
      "name": "opentelemetry-proto",
      "version": "1.3.2",
      "description": "OpenTelemetry protocol (OTLP) specification and Protobuf definitions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright The OpenTelemetry Authors",
      "purl": "pkg:github/open-telemetry/opentelemetry-proto@1.3.2",
      "externalReferences": [
        {
          "url": "https://github.com/open-telemetry/opentelemetry-proto",
          "type": "vcs"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/opentelemetry-proto"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/opentelemetry-proto/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/pcre2project/pcre2@pcre2-10.40",
      "supplier": {
        "name": "PCRE2 Project",
        "url": [
          "https://pcre2project.github.io/pcre2/"
        ]
      },
      "author": "Philip Hazel, Nicholas Wilson, Zolt\u00e1n Herczeg",
      "group": "pcre2",
      "name": "PCRE2 - Perl-Compatible Regular Expressions",
      "version": "10.40",
      "description": "The PCRE2 library is a set of C functions that implement regular expression pattern matching.",
      "scope": "required",
      "licenses": [
        {
          "expression": "BSD-3-Clause WITH PCRE2-exception"
        }
      ],
      "copyright": "Retired from University of Cambridge Computing Service, Cambridge, England. Copyright (c) 1997-2007 University of Cambridge. Copyright (c) 2007-2024 Philip Hazel. All rights reserved.",
      "cpe": "cpe:2.3:a:pcre:pcre2:10.40:*:*:*:*:*:*:*",
      "purl": "pkg:github/pcre2project/pcre2@pcre2-10.40",
      "externalReferences": [
        {
          "url": "https://github.com/pcre2project/pcre2.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/pcre2"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/scripts/pcre2_get_sources.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/protocolbuffers/protobuf@v6.31.1",
      "supplier": {
        "name": "Google LLC",
        "url": [
          "https://protobuf.dev/"
        ]
      },
      "author": "Google LLC",
      "group": "google.opensource",
      "name": "Protobuf",
      "version": "6.31.1",
      "description": "Protocol Buffers - Google's data interchange format",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "copyright": "Copyright 2008 Google Inc. Copyright 2023 Google LLC. All rights reserved.",
      "cpe": "cpe:2.3:a:google:protobuf-cpp:6.31.1:*:*:*:*:*:*:*",
      "purl": "pkg:github/protocolbuffers/protobuf@v6.31.1",
      "externalReferences": [
        {
          "url": "https://github.com/protocolbuffers/protobuf.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/protobuf"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/protobuf/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/rnpgp/rnp@v0.18.1",
      "supplier": {
        "name": "Ribose Group Inc.",
        "url": [
          "https://www.rnpgp.org/"
        ]
      },
      "author": "Ribose Group Inc.",
      "group": "rnpgp",
      "name": "rnp",
      "version": "0.18.1",
      "description": "A high performance C++ OpenPGP library, fully compliant to RFC 4880.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2017-2024, Ribose Inc. All rights reserved.",
      "purl": "pkg:github/rnpgp/rnp@v0.18.1",
      "externalReferences": [
        {
          "url": "https://github.com/rnpgp/rnp",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/rnp"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/rnp/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/roaringbitmap/croaring@v3.0.1",
      "supplier": {
        "name": "Roaring Bitmaps",
        "url": [
          "https://roaringbitmap.org/"
        ]
      },
      "author": "The CRoaring authors",
      "group": "roaringbitmap",
      "name": "CRoaring",
      "version": "3.0.1",
      "description": "Roaring bitmaps in C (and C++), with SIMD (AVX2, AVX-512 and NEON) optimizations: used by Apache Doris, ClickHouse, and StarRocks. Roaring bitmaps are compressed bitmaps which tend to outperform conventional compressed bitmaps such as WAH, EWAH or Concise. In some instances, they can be hundreds of times faster and they often offer significantly better compression.",
      "scope": "required",
      "licenses": [
        {
          "expression": "Apache-2.0 OR MIT"
        }
      ],
      "copyright": "Copyright 2016-2022 The CRoaring authors",
      "cpe": "cpe:2.3:a:roaringbitmap:croaring:3.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:github/roaringbitmap/croaring@v3.0.1",
      "externalReferences": [
        {
          "url": "https://github.com/roaringbitmap/croaring.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/croaring"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/croaring/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/schemastore/schemastore@6847cfc3a17a04a7664474212db50c627e1e3408",
      "supplier": {
        "name": "SchemaStore",
        "url": [
          "https://www.schemastore.org/"
        ]
      },
      "author": "Mads Kristensen and Contributors",
      "group": "schemastore",
      "name": "JSON Schema Store",
      "version": "6847cfc3a17a04a7664474212db50c627e1e3408",
      "description": "A collection of JSON schema files including full API",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright 2015-Current Mads Kristensen and Contributors",
      "purl": "pkg:github/schemastore/schemastore@6847cfc3a17a04a7664474212db50c627e1e3408",
      "externalReferences": [
        {
          "url": "https://github.com/schemastore/schemastore.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/schemastore.org"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/snowballstem/snowball@1.0.0",
      "supplier": {
        "name": "Snowball",
        "url": [
          "https://snowballstem.org/"
        ]
      },
      "author": "Dr. Martin Porter",
      "group": "snowballstem",
      "name": "Snowball Stemming Algorithms (libstemmer)",
      "version": "1.0.0",
      "description": "Snowball is a small string processing language for creating stemming algorithms for use in Information Retrieval, plus a collection of stemming algorithms implemented using it.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "copyright": "Copyright (c) 2001, Dr Martin Porter. All rights reserved.",
      "purl": "pkg:github/snowballstem/snowball@1.0.0",
      "externalReferences": [
        {
          "url": "http://github.com/snowballstem/snowball.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/libstemmer_c"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/libstemmer_c/scripts/import.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/unicode-org/icu@icu-release-57-1",
      "supplier": {
        "name": "The Unicode Consortium",
        "url": [
          "https://icu.unicode.org/"
        ]
      },
      "author": "The Unicode Consortium",
      "group": "unicode-org",
      "name": "ICU4C - International Components for Unicode C/C++",
      "version": "57.1",
      "description": "International Components for Unicode (ICU) is an open-source project of mature libraries for Unicode support, software internationalization, and software globalization. The C/C++ version, known as ICU4C, offers comprehensive functionalities for handling globalized applications.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Unicode-3.0",
            "url": "https://github.com/unicode-org/icu/blob/main/LICENSE"
          }
        }
      ],
      "copyright": "Copyright \u00a9 2016-2025 Unicode, Inc.",
      "cpe": "cpe:2.3:a:icu-project:international_components_for_unicode:57.1:*:*:*:*:c/c++:*:*",
      "purl": "pkg:github/unicode-org/icu@icu-release-57-1",
      "externalReferences": [
        {
          "url": "https://github.com/unicode-org/icu.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/icu4c-57.1"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "import_script_path",
          "value": "src/third_party/scripts/icu_get_sources.sh"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:github/veorq/siphash@32d067603b93b47828700880649198e0bfbbcffa",
      "author": "Jean-Philippe Aumasson, Daniel J. Bernstein",
      "group": "veorq",
      "name": "siphash",
      "version": "32d067603b93b47828700880649198e0bfbbcffa",
      "description": "High-speed secure pseudorandom function for short messages",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        },
        {
          "license": {
            "name": "Apache 2.0 with LLVM exception"
          }
        }
      ],
      "copyright": "This code is copyright (c) 2014-2023 Jean-Philippe Aumasson, Daniel J. Bernstein.",
      "purl": "pkg:github/veorq/siphash@32d067603b93b47828700880649198e0bfbbcffa",
      "externalReferences": [
        {
          "url": "https://github.com/veorq/siphash/",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/siphash"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:github/wiredtiger/wiredtiger@12.0.0",
      "supplier": {
        "name": "MongoDB, Inc.",
        "url": [
          "https://mongodb.com"
        ]
      },
      "author": "MongoDB, Inc.",
      "group": "mongodb",
      "name": "WiredTiger",
      "version": "12.0.0",
      "description": "WiredTiger is an high performance, scalable, production quality, NoSQL, Open Source extensible platform for data management.",
      "scope": "required",
      "licenses": [
        {
          "expression": "GPL-2.0-only OR GPL-3.0-only"
        }
      ],
      "copyright": "Copyright (c) 2014-present MongoDB, Inc., Copyright (c) 2008-2014 WiredTiger, Inc., All rights reserved.",
      "purl": "pkg:github/wiredtiger/wiredtiger@12.0.0",
      "externalReferences": [
        {
          "url": "https://github.com/wiredtiger/wiredtiger.git",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/wiredtiger"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "true"
        },
        {
          "name": "mdb_first_party",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:pypi/ocspbuilder@0.10.2",
      "author": "Will Bond",
      "group": "wbond",
      "name": "pypi/ocspbuilder",
      "version": "0.10.2",
      "description": "Creates and signs online certificate status protocol (OCSP) requests and responses for X.509 certificates",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "copyright": "Copyright (c) 2015-2018 Will Bond <will@wbond.net>",
      "purl": "pkg:pypi/ocspbuilder@0.10.2",
      "externalReferences": [
        {
          "url": "https://pypi.org/project/ocspbuilder/",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/mock_ocsp_responder"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:pypi/ocspresponder@0.5.0",
      "supplier": {
        "name": "Threema GmbH",
        "url": [
          "https://threema.ch/"
        ]
      },
      "author": "Threema GmbH",
      "group": "threema-ch",
      "name": "pypi/ocspresponder",
      "version": "0.5.0",
      "description": "RFC 6960 compliant OCSP Responder framework written in Python 3.",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "copyright": "Copyright 2016 Threema GmbH",
      "purl": "pkg:pypi/ocspresponder@0.5.0",
      "externalReferences": [
        {
          "url": "https://pypi.org/project/ocspresponder/",
          "type": "distribution"
        }
      ],
      "evidence": {
        "occurrences": [
          {
            "location": "src/third_party/mock_ocsp_responder"
          }
        ]
      },
      "properties": [
        {
          "name": "emits_persisted_data",
          "value": "false"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:deb/debian/firefox-esr@140.9.0esr-1?arch=source",
      "dependsOn": []
    },
    {
      "ref": "pkg:generic/intel/IntelRDFPMathLib@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:generic/unicode-org/unicode@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:generic/valgrind/valgrind@093bef43d69236287ccc748591c9560a71181b0a",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/aappleby/smhasher@a6bd3ce7be8ad147ea820a7cf6229a975c0c96bb",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/abseil/abseil-cpp@20250512.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/antirez/linenoise@6cdc775807e57b2c3fd64bd207814f8ee1fe35f3",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/arximboldi/immer@v0.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/boostorg/boost@boost-1.88.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/c-ares/c-ares@cares-1_27_0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/chriskohlhoff/asio@asio-1-34-2",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/cyrusimap/cyrus-sasl@cyrus-sasl-2.1.28",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/davea42/libdwarf-code@libdwarf-2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/dcleblanc/safeint@3.0.28a",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/derickr/timelib@2022.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/facebook/folly@v2023.12.25.00",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/facebook/zstd@v1.5.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/fmtlib/fmt@11.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/google/benchmark@v1.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/google/fuzztest@2025-07-28",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/google/googletest@v1.17.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/google/re2@2025-08-05",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/google/s2geometry@a25c502bda9d7e0274b9e2b7825fbddf13cc0306",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/google/snappy@1.1.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/google/tcmalloc@f3b20f9a07e175c5d897df7b49d9830d4efa6110",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/gperftools/gperftools@2.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/grpc/grpc@v1.74.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/jbeder/yaml-cpp@yaml-cpp-0.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/jeremy-rifkin/cpptrace@v1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/json-c/json-c@0.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/json-schema-org/json-schema-test-suite@728066f9c5c258ba3b1804a22a5b998f2ec77ec0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/jupp0r/prometheus-cpp@v1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/libarchive/bzip2@bzip2-1.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/libtom/libtomcrypt@v1.18.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/libunwind/libunwind@v1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/madler/zlib@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/mongodb/libmongocrypt@1.15.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/mongodb/mongo-c-driver@1.28.1",
      "dependsOn": [
        "pkg:github/madler/zlib@1.3.2"
      ]
    },
    {
      "ref": "pkg:github/mongodb/mongo@master",
      "dependsOn": [
        "pkg:deb/debian/firefox-esr@140.9.0esr-1?arch=source",
        "pkg:generic/intel/IntelRDFPMathLib@2.0.1",
        "pkg:generic/unicode-org/unicode@8.0.0",
        "pkg:generic/valgrind/valgrind@093bef43d69236287ccc748591c9560a71181b0a",
        "pkg:github/aappleby/smhasher@a6bd3ce7be8ad147ea820a7cf6229a975c0c96bb",
        "pkg:github/abseil/abseil-cpp@20250512.1",
        "pkg:github/antirez/linenoise@6cdc775807e57b2c3fd64bd207814f8ee1fe35f3",
        "pkg:github/arximboldi/immer@v0.9.1",
        "pkg:github/boostorg/boost@boost-1.88.0",
        "pkg:github/c-ares/c-ares@cares-1_27_0",
        "pkg:github/chriskohlhoff/asio@asio-1-34-2",
        "pkg:github/cyrusimap/cyrus-sasl@cyrus-sasl-2.1.28",
        "pkg:github/davea42/libdwarf-code@libdwarf-2.1.0",
        "pkg:github/dcleblanc/safeint@3.0.28a",
        "pkg:github/derickr/timelib@2022.13",
        "pkg:github/facebook/folly@v2023.12.25.00",
        "pkg:github/facebook/zstd@v1.5.5",
        "pkg:github/fmtlib/fmt@11.2.0",
        "pkg:github/google/benchmark@v1.5.2",
        "pkg:github/google/fuzztest@2025-07-28",
        "pkg:github/google/googletest@v1.17.0",
        "pkg:github/google/re2@2025-08-05",
        "pkg:github/google/s2geometry@a25c502bda9d7e0274b9e2b7825fbddf13cc0306",
        "pkg:github/google/snappy@1.1.10",
        "pkg:github/google/tcmalloc@f3b20f9a07e175c5d897df7b49d9830d4efa6110",
        "pkg:github/gperftools/gperftools@2.9.1",
        "pkg:github/grpc/grpc@v1.74.1",
        "pkg:github/jbeder/yaml-cpp@yaml-cpp-0.6.3",
        "pkg:github/jeremy-rifkin/cpptrace@v1.0.3",
        "pkg:github/json-schema-org/json-schema-test-suite@728066f9c5c258ba3b1804a22a5b998f2ec77ec0",
        "pkg:github/libtom/libtomcrypt@v1.18.2",
        "pkg:github/libunwind/libunwind@v1.8.1",
        "pkg:github/madler/zlib@1.3.2",
        "pkg:github/mongodb/libmongocrypt@1.15.0",
        "pkg:github/nlohmann/json@v3.11.3",
        "pkg:github/nodejs/node@22.1.0?download_url=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fblob%2F8b45c5d26a829bcd3280401dbc1874bcd1302289%2Fsrc%2Fnode_i18n.cc%23L825%23src%2Fnode_i18n.cc%3AGetStringWidth#src/node_i18n.cc",
        "pkg:github/open-telemetry/opentelemetry-cpp@v1.24.0",
        "pkg:github/open-telemetry/opentelemetry-proto@1.3.2",
        "pkg:github/pcre2project/pcre2@pcre2-10.40",
        "pkg:github/protocolbuffers/protobuf@v6.31.1",
        "pkg:github/rnpgp/rnp@v0.18.1",
        "pkg:github/roaringbitmap/croaring@v3.0.1",
        "pkg:github/schemastore/schemastore@6847cfc3a17a04a7664474212db50c627e1e3408",
        "pkg:github/snowballstem/snowball@1.0.0",
        "pkg:github/unicode-org/icu@icu-release-57-1",
        "pkg:github/veorq/siphash@32d067603b93b47828700880649198e0bfbbcffa",
        "pkg:github/wiredtiger/wiredtiger@12.0.0",
        "pkg:pypi/ocspbuilder@0.10.2",
        "pkg:pypi/ocspresponder@0.5.0"
      ]
    },
    {
      "ref": "pkg:github/nlohmann/json@v3.11.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/nodejs/node@22.1.0?download_url=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fblob%2F8b45c5d26a829bcd3280401dbc1874bcd1302289%2Fsrc%2Fnode_i18n.cc%23L825%23src%2Fnode_i18n.cc%3AGetStringWidth#src/node_i18n.cc",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/open-telemetry/opentelemetry-cpp@v1.24.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/open-telemetry/opentelemetry-proto@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/pcre2project/pcre2@pcre2-10.40",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/protocolbuffers/protobuf@v6.31.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/rnpgp/rnp@v0.18.1",
      "dependsOn": [
        "pkg:github/json-c/json-c@0.17",
        "pkg:github/libarchive/bzip2@bzip2-1.0.8"
      ]
    },
    {
      "ref": "pkg:github/roaringbitmap/croaring@v3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/schemastore/schemastore@6847cfc3a17a04a7664474212db50c627e1e3408",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/snowballstem/snowball@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/unicode-org/icu@icu-release-57-1",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/veorq/siphash@32d067603b93b47828700880649198e0bfbbcffa",
      "dependsOn": []
    },
    {
      "ref": "pkg:github/wiredtiger/wiredtiger@12.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:pypi/ocspbuilder@0.10.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:pypi/ocspresponder@0.5.0",
      "dependsOn": []
    }
  ]
}